<?xml version="1.0" ?>
<rss version="2.0">
  <channel>
    <title>Most recent updated packages for CentOS 10-stream aarch64 CRB</title>
    <link>http://www.centos.org</link>
    <description>Most recent updated packages for CentOS 10-stream aarch64 CRB</description>
    <pubDate>Sun, 16 Aug 2026 10:42:17 PM GMT</pubDate>
    <generator>DNF</generator>
    <item>
      <title>ostree-devel-2026.3-1.el10.aarch64</title>
      <pubDate>Thu, 06 Aug 2026 04:22:00 PM GMT</pubDate>
      <guid isPermaLink="false">acb677276eb870a6abd1b99f162ffa204dc171dc013996218ef5e96dc5fb7644</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/ostree-devel-2026.3-1.el10.aarch64.rpm</link>
      <description><p><strong>ostree-devel</strong> - Development headers for ostree&lt;br /&gt;</p>

<p>The ostree-devel package includes the header files for the ostree library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 06 Aug 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.3-1
- spec: new upstream version 2026.3

Wed, 01 Jul 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.2-1
- spec: new upstream version 2026.2

Sat, 11 Apr 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-1
- Release 2026.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>unbound-devel-1.26.0-1.el10.aarch64</title>
      <pubDate>Thu, 06 Aug 2026 03:16:39 PM GMT</pubDate>
      <guid isPermaLink="false">a3e5ea96d14edff701d6079e85b28267a460a050ac8e8d1179795015550cf80f</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/unbound-devel-1.26.0-1.el10.aarch64.rpm</link>
      <description><p><strong>unbound-devel</strong> - Development package that includes the unbound header files&lt;br /&gt;</p>

<p>The devel package contains the unbound library and the include files</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 06 Aug 2026 GMT - Fedor Vorobev &amp;lt;fvorobev@redhat.com&amp;gt; - 1.26.0-1
- Update to 1.26.0

Fri, 03 Jul 2026 GMT - Fedor Vorobev &amp;lt;fvorobev@redhat.com&amp;gt; - 1.25.1-1
- Update to 1.25.1

Fri, 13 Feb 2026 GMT - Petr Menšík &amp;lt;pemensik@redhat.com&amp;gt; - 1.24.2-7
- Recreate configure unconditionally

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-tools-libs-devel-6.12.0-257.el10.aarch64</title>
      <pubDate>Thu, 06 Aug 2026 12:12:38 PM GMT</pubDate>
      <guid isPermaLink="false">571d0a88da1a8e487f02737434f1336b2d4e6c041a686b3bc9f0250c407c1a4a</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/kernel-tools-libs-devel-6.12.0-257.el10.aarch64.rpm</link>
      <description><p><strong>kernel-tools-libs-devel</strong> - Assortment of tools for the Linux kernel&lt;br /&gt;</p>

<p>This package contains the development files for the tools/ directory from&lt;br /&gt;
the kernel source.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 06 Aug 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-257.el10]
- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562]
- wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079]
- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634]
- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358]
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430]
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345]
- PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011]
- PCI: Align head space better (Myron Stowe) [RHEL-178011]
- PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011]
- parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011]
- MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011]
- resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011]
- resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011]
- PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011]
- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011]
- resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011]
- resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011]
- kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011]
- resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011]
- resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011]
- resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011]
- resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011]
- selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873]
- dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873]
- tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873]
- tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873]
- net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873]
- net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873]
- selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873]
- selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873]
- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625]

Wed, 05 Aug 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-256.el10]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996]
- kselftest/arm64: Handle attempts to disable SM on SME only systems (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Test SME on SME only systems in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- arm64: mm: Cast start/end markers to char *, not u64 (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Cover disabling streaming mode without SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Don't open code SVE_PT_SIZE() in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Fix SVE write data generation for SME only systems (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Test FPSIMD format data writes via NT_ARM_SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- kselftst/arm64: Test NT_ARM_SVE FPSIMD format writes on non-SVE systems (Steve Dunnagan) [RHEL-158921]
- arm64/sysreg: Replace TCR_EL1 field macros (Steve Dunnagan) [RHEL-158921]
- arm64: mm: Represent physical memory with phys_addr_t and resource_size_t (Steve Dunnagan) [RHEL-158921]
- arm64: mm: Make map_fdt() return mapped pointer (Steve Dunnagan) [RHEL-158921]
- arm64/fpsimd: signal: Fix restoration of SVE context (Steve Dunnagan) [RHEL-158921]
- arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (Steve Dunnagan) [RHEL-158921]
- arm64/fpsimd: ptrace: Fix SVE writes on !SME systems (Steve Dunnagan) [RHEL-158921]
- arm64: Fix cleared E0POE bit after cpu_suspend()/resume() (Steve Dunnagan) [RHEL-158921]
- arm64/gcs: Flush the GCS locking state on exec (Steve Dunnagan) [RHEL-158921]
- arm64/sysreg: Remove unused define ARM64_FEATURE_FIELD_BITS (Steve Dunnagan) [RHEL-158921]
- arm64/sme: Support disabling streaming mode via ptrace on SME only systems (Steve Dunnagan) [RHEL-158921]
- arm64: Fix typos and spelling errors in comments (Steve Dunnagan) [RHEL-158921]
- arm64: Fix double word in comments (Steve Dunnagan) [RHEL-158921]
- arm64: atomics: lse: Remove unused parameters from ATOMIC_FETCH_OP_AND macros (Steve Dunnagan) [RHEL-158921]
- arm64: remove duplicate ARCH_HAS_MEM_ENCRYPT (Steve Dunnagan) [RHEL-158921]
- arm64: add unlikely hint to MTE async fault check in el0_svc_common (Steve Dunnagan) [RHEL-158921]
- arm64: acpi: add newline to deferred APEI warning (Steve Dunnagan) [RHEL-158921]
- arm64/mm: Ensure PGD_SIZE is aligned to 64 bytes when PA_BITS = 52 (Steve Dunnagan) [RHEL-158921]
- arm64/mm: Drop cpu_set_[default|idmap]_tcr_t0sz() (Steve Dunnagan) [RHEL-158921]
- arm64: remove unused ARCH_PFN_OFFSET (Steve Dunnagan) [RHEL-158921]
- arm64: use SOFTIRQ_ON_OWN_STACK for enabling softirq stack (Steve Dunnagan) [RHEL-158921]
- arm64: Remove assertion on CONFIG_VMAP_STACK (Steve Dunnagan) [RHEL-158921]
- uaccess: Provide ASM GOTO safe wrappers for unsafe_*_user() (Steve Dunnagan) [RHEL-158921]
- arm64: uaccess: Use unsafe wrappers for ASM GOTO (Steve Dunnagan) [RHEL-158921]
- igc: fix typos in comments (Michal Schmidt) [RHEL-186597]
- igc: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-186597]
- igc: skip RX timestamp header for frame preemption verification (Michal Schmidt) [RHEL-186597]
- igc: fix potential skb leak in igc_fpe_xmit_smd_frame() (Michal Schmidt) [RHEL-186597]
- igc: set tx buffer type for SMD frames (Michal Schmidt) [RHEL-186597]
- net: Consistently define pci_device_ids using named initializers [igc] (Michal Schmidt) [RHEL-186597]
- igc: fix page fault in XDP TX timestamps handling (Michal Schmidt) [RHEL-186597]
- igc: fix missing update of skb-&amp;gt;tail in igc_xmit_frame() (Michal Schmidt) [RHEL-186597]
- igc: Fix trigger of incorrect irq in igc_xsk_wakeup function (Michal Schmidt) [RHEL-186597]
- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [igc] (Michal Schmidt) [RHEL-186597]
- Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igc] (Michal Schmidt) [RHEL-186597]
- igb: fix typos in comments (Michal Schmidt) [RHEL-177449]
- igb: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-177449]
- igb: use ktime_get_real helpers in igb_ptp_reset() (Michal Schmidt) [RHEL-177449]
- net: Consistently define pci_device_ids using named initializers [igb,igbvf] (Michal Schmidt) [RHEL-177449]
- igb: remove napi_synchronize() in igb_down() (Michal Schmidt) [RHEL-177449]
- igb: Fix trigger of incorrect irq in igb_xsk_wakeup (Michal Schmidt) [RHEL-177449]
- Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [igb] (Michal Schmidt) [RHEL-177449]
- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igb,igbvf] (Michal Schmidt) [RHEL-177449]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igb,igbvf] (Michal Schmidt) [RHEL-177449]
- igb: Switch to use %ptSp (Michal Schmidt) [RHEL-177449]
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175863] {CVE-2024-53143}
- scsi: mpt3sas: Limit NVMe request size to 2 MiB (Chandrakanth Patil) [RHEL-141216] {CVE-2026-46105}
- scsi: mpt3sas: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Add configurable command retry limit for slow-to-respond devices (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Add firmware event requeue support for busy devices (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Improve device discovery and readiness handling for slow devices (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Added no_turs flag to device unblock logic (Chandrakanth Patil) [RHEL-141216]
- scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Fix typo and grammar (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Fix typo (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add retry mechanism for IOC shutdown with timeout reset (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add queue-full tracking for operational request queues (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Reset controller on invalid I/O completion (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Chandrakanth Patil) [RHEL-141215] {CVE-2026-43473}
- scsi: mpi3mr: Make driver probing asynchronous (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Driver version update to 8.17.0.3.50 (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Record and report controller firmware faults (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Update MPI Headers to revision 39 (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Use negotiated link rate from DevicePage0 (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Avoid redundant diag-fault resets (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Rename log data save helper to reflect threaded/BH context (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add module parameter to control threaded IRQ polling (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Prevent duplicate SAS/SATA device entries in channel 1 (Chandrakanth Patil) [RHEL-141215]

Tue, 04 Aug 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-255.el10]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-169756]
- xfrm: esp: restore combined single-frag length gate (Xin Long) [RHEL-178329]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Xin Long) [RHEL-180168] {CVE-2026-46116}
- espintcp: Fix race condition in espintcp_close() (Xin Long) [RHEL-154898] {CVE-2026-23239}
- pseries/lparcfg: Add resource group monitoring (Mamatha Inamdar) [RHEL-217019]
- nvme-apple: drop invalid put of admin queue reference count (Maurizio Lombardi) [RHEL-54175]
- nvme-core: warn on allocating admin tag set with existing queue (Maurizio Lombardi) [RHEL-54175]
- nvme-core: fix unsigned comparison warning in nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-54175]
- nvmet-loop: do not alloc admin tag set during reset (Maurizio Lombardi) [RHEL-54175]
- nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl (Maurizio Lombardi) [RHEL-54175]
- nvme: add sysfs attribute to change IO timeout per controller (Maurizio Lombardi) [RHEL-54175]
- nvme: add sysfs attribute to change admin timeout per nvme controller (Maurizio Lombardi) [RHEL-54175]
- nvme: remove redundant timeout argument from nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-54175]
- nvme: Let the blocklayer set timeouts for requests (Maurizio Lombardi) [RHEL-54175]
- ata: libata-pmp: add JMicron JMS562 quirk (Tomas Henzl) [RHEL-157217]
- ata: libata-core: disable LPM on ADATA SU680 SSD (Tomas Henzl) [RHEL-157217]
- ata: libata-core: Disable LPM on ST1000DM010-2EP102 (Tomas Henzl) [RHEL-157217]
- ata: libata-core: Disable LPM on ST2000DM008-2FR102 (Tomas Henzl) [RHEL-157217]
- ata: libata: Fix ata_exec_internal() (Tomas Henzl) [RHEL-157217]
- ata: libata-eh: Do not retry reset if the device is gone (Tomas Henzl) [RHEL-157217]
- ata: libata: avoid long timeouts on hot-unplugged SATA DAS (Tomas Henzl) [RHEL-157217]
- ata: libata-eh: avoid unnecessary calls to ata_scsi_port_error_handler() (Tomas Henzl) [RHEL-157217]
- ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 (Tomas Henzl) [RHEL-157217]
- ata: ahci: Do not read the per port area for unimplemented ports (Tomas Henzl) [RHEL-157217]
- ata: ahci: fail probe if BAR too small for claimed ports (Tomas Henzl) [RHEL-157217]
- scsi: core: wake eh reliably when using scsi_schedule_eh (David Jeffery) [RHEL-208594]
- ksmbd: fix memory leak of xattr_stream_name in smb2_rename() (Paulo Alcantara) [RHEL-190706]
- ksmbd: zero the smb2_read alignment tail to avoid an infoleak (Paulo Alcantara) [RHEL-190706]
- ksmbd: pin conn during async oplock break notification (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix integer overflow in set_file_allocation_info() (Paulo Alcantara) [RHEL-190706]
- smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-190706]
- smb: client: reject overlapping data areas in SMB2 responses (Paulo Alcantara) [RHEL-190706]
- smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-190706]
- smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-190706]
- smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-190706]
- smb/client: handle overlapping allocated ranges in fallocate (Paulo Alcantara) [RHEL-190706]
- smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-190706]
- smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-190706]
- redhat/configs: enable CONFIG_CIFS_SMB_DIRECT (Paulo Alcantara) [RHEL-190706]
- redhat/configs: disable CONFIG_SMB_KUNIT_TESTS (Paulo Alcantara) [RHEL-190706]
- scatterlist: Fix offset in folio calc in extract_xarray_to_sg() (Paulo Alcantara) [RHEL-190706]
- iov_iter: Fix a memory leak in iov_iter_extract_user_pages() (Paulo Alcantara) [RHEL-190706]
- iov_iter: Fix missing alloc fail check in iov_iter_extract_bvec_pages() (Paulo Alcantara) [RHEL-190706]
- iov_iter: Fix potential underflow in iov_iter_extract_xarray_pages() (Paulo Alcantara) [RHEL-190706]
- cachefiles: Fix double fput (Paulo Alcantara) [RHEL-190706]
- smb: client: mask server-provided mode to 07777 in modefromsid (Paulo Alcantara) [RHEL-190706]
- smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-190706]
- smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-190706]
- smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-190706]
- smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix overflow in passthrough ioctl bounds check (Paulo Alcantara) [RHEL-190706]
- smb: client: fix busy dentry warning on unmount after DIO (Paulo Alcantara) [RHEL-190706]
- cifs: Fix support for creating SFU fifo (Paulo Alcantara) [RHEL-190706]
- cifs: Fix support for creating SFU socket (Paulo Alcantara) [RHEL-190706]
- smb: client: fix atime clamp check in read completion (Paulo Alcantara) [RHEL-190706]
- cifs: validate DFS referral string offsets (Paulo Alcantara) [RHEL-190706]
- smb: client: use GFP_KERNEL for DFS cache allocations (Paulo Alcantara) [RHEL-190706]
- smb: client: restrict implied bcc[0] exemption to responses without data area (Paulo Alcantara) [RHEL-190706]
- smb: client: preserve leading slash for POSIX absolute symlink targets (Paulo Alcantara) [RHEL-190706]
- smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix barriering when walking subrequest list (Paulo Alcantara) [RHEL-190706]
- cifs: Fix missing credit release on failure in cifs_issue_read() (Paulo Alcantara) [RHEL-190706]
- cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
- smb: client: use unaligned reads in parse_posix_ctxt() (Paulo Alcantara) [RHEL-190706]
- smb: client: harden POSIX SID length parsing (Paulo Alcantara) [RHEL-190706]
- netfs: Fix DIO write retry for filesystems without a -&amp;gt;prepare_write() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix folio state after ENOMEM whilst under writeback iteration (Paulo Alcantara) [RHEL-190706]
- netfs: Fix writeback error handling (Paulo Alcantara) [RHEL-190706]
- netfs: Fix writethrough to use collection offload (Paulo Alcantara) [RHEL-190706]
- netfs: Replace wb_lock with a bit lock for asynchronicity (Paulo Alcantara) [RHEL-190706]
- netfs: Fix kdoc warning (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_create_write_req() to handle async cache object creation (Paulo Alcantara) [RHEL-190706]
- netfs: Fix decision whether to disallow write-streaming due to fscache use (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix app-instance durable supersede session UAF (Paulo Alcantara) [RHEL-190706]
- ksmbd: snapshot previous oplock state before durable checks (Paulo Alcantara) [RHEL-190706]
- ksmbd: close superseded durable handles through refcount handoff (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of fp-&amp;gt;owner.name in durable handle owner check (Paulo Alcantara) [RHEL-190706]
- smb/server: do not require delete access for non-replacing links (Paulo Alcantara) [RHEL-190706]
- ksmbd: don't hold ci-&amp;gt;m_lock while waiting for a lease break ack (Paulo Alcantara) [RHEL-190706]
- ksmbd: annotate oplock list traversals under m_lock (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix outstanding credit leak on abort and error paths (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix credit charge calculation for SMB2 QUERY_INFO (Paulo Alcantara) [RHEL-190706]
- ksmbd: avoid zeroing the read buffer in smb2_read() (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl (Paulo Alcantara) [RHEL-190706]
- ksmbd: reject undersized DACLs before parsing ACEs (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr (Paulo Alcantara) [RHEL-190706]
- ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr (Paulo Alcantara) [RHEL-190706]
- cifs: define variable sized buffer for querydir responses (Paulo Alcantara) [RHEL-190706]
- smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-190706]
- smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-190706]
- smb: client: Fix next buffer leak in receive_encrypted_standard() (Paulo Alcantara) [RHEL-190706]
- smb/client: use %pe to print error pointer (Paulo Alcantara) [RHEL-190706]
- smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-190706]
- smb common: add missing AAPL defines (Paulo Alcantara) [RHEL-190706]
- smb/client: fix chown/chgrp with SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-190706]
- smb/client: fix security flag calculation when setting security descriptors (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix kernel-doc warnings in smb2_lease_break_noti() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix inconsistent indenting warnings (Paulo Alcantara) [RHEL-190706]
- ksmbd: increase SMB3_DEFAULT_TRANS_SIZE from 1MB to 4MB (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix UBSAN array-index-out-of-bounds in decode_compress_ctxt() (Paulo Alcantara) [RHEL-190706]
- ksmbd: sleep interruptibly in the durable handle scavenger (Paulo Alcantara) [RHEL-190706]
- ksmbd: start file id allocation at 1 (Paulo Alcantara) [RHEL-190706]
- ksmbd: treat read-control opens as stat opens only for leases (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate :: stream type against directory create (Paulo Alcantara) [RHEL-190706]
- ksmbd: break conflicting-open leases only as far as needed (Paulo Alcantara) [RHEL-190706]
- ksmbd: break handle caching for share conflicts (Paulo Alcantara) [RHEL-190706]
- ksmbd: normalize ungrantable lease states (Paulo Alcantara) [RHEL-190706]
- ksmbd: return oplock protocol error for level II ack (Paulo Alcantara) [RHEL-190706]
- ksmbd: avoid level II oplock break notification on unlink (Paulo Alcantara) [RHEL-190706]
- ksmbd: downgrade oplock after break timeout (Paulo Alcantara) [RHEL-190706]
- ksmbd: apply create security descriptor first (Paulo Alcantara) [RHEL-190706]
- ksmbd: return requested create allocation size (Paulo Alcantara) [RHEL-190706]
- ksmbd: tighten create file attribute validation (Paulo Alcantara) [RHEL-190706]
- ksmbd: reject empty-attribute synchronize-only create (Paulo Alcantara) [RHEL-190706]
- ksmbd: honor stream delete sharing for base file (Paulo Alcantara) [RHEL-190706]
- ksmbd: send pending interim for last compound I/O (Paulo Alcantara) [RHEL-190706]
- ksmbd: return success for deferred final close (Paulo Alcantara) [RHEL-190706]
- ksmbd: preserve compound responses for chained errors (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate handle for create or get object id (Paulo Alcantara) [RHEL-190706]
- ksmbd: propagate failed command status in related compounds (Paulo Alcantara) [RHEL-190706]
- ksmbd: deny renaming directory with open children (Paulo Alcantara) [RHEL-190706]
- ksmbd: check parent directory sharing conflicts on rename (Paulo Alcantara) [RHEL-190706]
- ksmbd: preserve open change time across rename (Paulo Alcantara) [RHEL-190706]
- ksmbd: handle durable v2 app instance id (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable reconnect context parsing (Paulo Alcantara) [RHEL-190706]
- ksmbd: invalidate durable handles on oplock break (Paulo Alcantara) [RHEL-190706]
- ksmbd: supersede disconnected delete-on-close durable handle (Paulo Alcantara) [RHEL-190706]
- ksmbd: handle missing create contexts for lease opens (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of conn-&amp;gt;preauth_info in concurrent SMB2 NEGOTIATE (Paulo Alcantara) [RHEL-190706]
- ksmbd: keep common response iovecs in the work item (Paulo Alcantara) [RHEL-190706]
- ksmbd: route v2 lease breaks on the client lease channel (Paulo Alcantara) [RHEL-190706]
- ksmbd: break RH leases before delete-on-close (Paulo Alcantara) [RHEL-190706]
- ksmbd: honor SMB2 v2 lease epochs (Paulo Alcantara) [RHEL-190706]
- ksmbd: do not wait for RH lease break ack on overwrite (Paulo Alcantara) [RHEL-190706]
- ksmbd: chain pending lease breaks before waking waiters (Paulo Alcantara) [RHEL-190706]
- ksmbd: compute lease break-in-progress flag on response (Paulo Alcantara) [RHEL-190706]
- ksmbd: treat unnamed DATA stream as base file (Paulo Alcantara) [RHEL-190706]
- ksmbd: align SMB2 oplock break ack handling (Paulo Alcantara) [RHEL-190706]
- ksmbd: share SMB2 lease state across opens (Paulo Alcantara) [RHEL-190706]
- ksmbd: clean up lease response flags and directory leases (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix lease break and ack state handling (Paulo Alcantara) [RHEL-190706]
- ksmbd: use connection ClientGUID for lease lookup (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate SMB2 lease create contexts (Paulo Alcantara) [RHEL-190706]
- smb/server: fix debug log endianness in smb2_cancel() (Paulo Alcantara) [RHEL-190706]
- ksmbd: track the connection owning a byte-range lock (Paulo Alcantara) [RHEL-190706]
- smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix query directory replay double-free (Paulo Alcantara) [RHEL-190706]
- smb: client: fix change notify replay double-free (Paulo Alcantara) [RHEL-190706]
- smb: client: fix query_info() replay double-free (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_ioctl() replay (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_open() replay (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_flush() replay (Paulo Alcantara) [RHEL-190706]
- ksmbd: use opener credentials for FSCTL mutations (Paulo Alcantara) [RHEL-190706]
- ksmbd: use opener credentials for ADS I/O (Paulo Alcantara) [RHEL-190706]
- ksmbd: require source read access for duplicate extents (Paulo Alcantara) [RHEL-190706]
- ksmbd: run set info with opener credentials (Paulo Alcantara) [RHEL-190706]
- ksmbd: use opener credentials for delete-on-close (Paulo Alcantara) [RHEL-190706]
- ksmbd: serialize QUERY_DIRECTORY requests per file (Paulo Alcantara) [RHEL-190706]
- ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE (Paulo Alcantara) [RHEL-190706]
- ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION (Paulo Alcantara) [RHEL-190706]
- ksmbd: reject non-VALID session in compound request branch (Paulo Alcantara) [RHEL-190706]
- ksmbd: compress SMB2 READ responses (Paulo Alcantara) [RHEL-190706]
- ksmbd: negotiate and decode SMB2 compression (Paulo Alcantara) [RHEL-190706]
- cifs: negotiate chained SMB2 compression capabilities (Paulo Alcantara) [RHEL-190706]
- smb: add common SMB2 compression transform helpers (Paulo Alcantara) [RHEL-190706]
- smb: move LZ77 compression into common code (Paulo Alcantara) [RHEL-190706]
- ksmbd: add per-handle permission check to FILE_LINK_INFORMATION (Paulo Alcantara) [RHEL-190706]
- ksmbd: add a permission check for FSCTL_SET_ZERO_DATA (Paulo Alcantara) [RHEL-190706]
- ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL (Paulo Alcantara) [RHEL-190706]
- smb: server: remove code guarded by nonexistent config option (Paulo Alcantara) [RHEL-190706]
- smb/server: fix incorrect file size in get_file_compression_info() (Paulo Alcantara) [RHEL-190706]
- smb/server: get compression format in get_file_compression_info() (Paulo Alcantara) [RHEL-190706]
- smb/server: implement FSCTL_SET_COMPRESSION ioctl handler (Paulo Alcantara) [RHEL-190706]
- smb/server: implement FSCTL_GET_COMPRESSION ioctl handler (Paulo Alcantara) [RHEL-190706]
- smb/server: get compression file attribute on open (Paulo Alcantara) [RHEL-190706]
- smb: move compression definitions into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- smb: remove duplicate server/smbfsctl.h (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in same_client_has_lease() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl() (Paulo Alcantara) [RHEL-190706]
- smb: client: Use more common code in SMB2_tcon() (Paulo Alcantara) [RHEL-190706]
- smb: client: Use more common error handling code in smb3_reconfigure() (Paulo Alcantara) [RHEL-190706]
- smb/client: Fix error code in smb2_aead_req_alloc() (Paulo Alcantara) [RHEL-190706]
- smb/client: clean up a type issue in cifs_xattr_get() (Paulo Alcantara) [RHEL-190706]
- smb/client: allow FS_IOC_SETFLAGS to clear compression (Paulo Alcantara) [RHEL-190706]
- smb/client: use writable handle for FS_IOC_SETFLAGS compression (Paulo Alcantara) [RHEL-190706]
- smb/client: always return a value for FS_IOC_GETFLAGS (Paulo Alcantara) [RHEL-190706]
- smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-190706]
- smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-190706]
- cifs: validate full SID length in security descriptors (Paulo Alcantara) [RHEL-190706]
- smb: client: resolve SWN tcon from live registrations (Paulo Alcantara) [RHEL-190706]
- cifs: remove all cifs files before kill super (Paulo Alcantara) [RHEL-190706]
- smb: client: fix conflicting option validation for new mount API (Paulo Alcantara) [RHEL-190706]
- cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-190706]
- smb: client: convert cifs_smb3_do_mount() to sget_fc() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix NULL-deref of opinfo-&amp;gt;conn in oplock/lease break notifiers (Paulo Alcantara) [RHEL-190706]
- smb: client: fix uninitialized variable in smb2_writev_callback (Paulo Alcantara) [RHEL-190706]
- smb: client: detect short folioq copy in cifs_copy_folioq_to_iter() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE (Paulo Alcantara) [RHEL-190706]
- ksmbd: release ksmbd_inode ref via ksmbd_inode_put on lookup paths (Paulo Alcantara) [RHEL-190706]
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops (Paulo Alcantara) [RHEL-190706]
- smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate SID in parent security descriptor during ACL inheritance (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable reconnect error path file lifetime (Paulo Alcantara) [RHEL-190706]
- smb: client: change allocation requirements in DUP_CTX_STR macro (Paulo Alcantara) [RHEL-190706]
- smb: client: require net admin for CIFS SWN netlink (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: divide, not multiply, milliseconds by 1000 (Paulo Alcantara) [RHEL-190706]
- cifs: Fix busy dentry used after unmounting (Paulo Alcantara) [RHEL-190706]
- smb: client: use data_len for SMB2 READ encrypted folioq copy (Paulo Alcantara) [RHEL-190706]
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Paulo Alcantara) [RHEL-190706]
- cifs: Fix undefined variables (Paulo Alcantara) [RHEL-190706]
- smbdirect: Fix error cleanup in smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
- smb: client: avoid integer overflow in SMB2 READ length check (Paulo Alcantara) [RHEL-190706]
- cifs: client: stage smb3_reconfigure() updates and restore ctx on failure (Paulo Alcantara) [RHEL-190706]
- smb/client: fix possible infinite loop and oob read in symlink_data() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix null pointer dereference in compare_guid_key() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix null pointer dereference in proc_show_files() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow (Paulo Alcantara) [RHEL-190706]
- SMB3.1.1: add missing QUERY_DIR info levels (Paulo Alcantara) [RHEL-190706]
- netfs, afs: Fix write skipping in dir/link writepages (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_read_folio() to wait on writeback (Paulo Alcantara) [RHEL-190706]
- netfs: Fix folio-&amp;gt;private handling in netfs_perform_write() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix partial invalidation of streaming-write folio (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix leak of request in netfs_write_begin() error handling (Paulo Alcantara) [RHEL-190706]
- netfs: Fix early put of sink folio in netfs_read_gaps() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix write streaming disablement if fd open O_RDWR (Paulo Alcantara) [RHEL-190706]
- netfs: Fix read-gaps to remove netfs_folio from filled folio (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential deadlock in write-through mode (Paulo Alcantara) [RHEL-190706]
- netfs: Fix streaming write being overwritten (Paulo Alcantara) [RHEL-190706]
- netfs: Defer the emission of trace_netfs_folio() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (Paulo Alcantara) [RHEL-190706]
- netfs: Fix overrun check in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
- netfs: fix error handling in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential uninitialised var in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
- netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call (Paulo Alcantara) [RHEL-190706]
- netfs: Fix zeropoint update where i_size &amp;gt; remote_i_size (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential for tearing in -&amp;gt;remote_i_size and -&amp;gt;zero_point (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_read_to_pagecache() to pause on subreq failure (Paulo Alcantara) [RHEL-190706]
- netfs: Fix missing barriers when accessing stream-&amp;gt;subrequests locklessly (Paulo Alcantara) [RHEL-190706]
- netfs: Fix missing locking around retry adding new subreqs (Paulo Alcantara) [RHEL-190706]
- netfs: Fix cancellation of a DIO and single read subrequests (Paulo Alcantara) [RHEL-190706]
- smb/client: fix out-of-bounds read in symlink_data() (Paulo Alcantara) [RHEL-190706]
- smb: client: Zero-pad short GSS session keys per MS-SMB2 (Paulo Alcantara) [RHEL-190706]
- smb: client: Use FullSessionKey for AES-256 encryption key derivation (Paulo Alcantara) [RHEL-190706]
- cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate inherited ACE SID length (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix kernel-doc warnings from ksmbd_conn_get/put() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fail share config requests when path allocation fails (Paulo Alcantara) [RHEL-190706]
- ksmbd: close durable scavenger races against m_fp_list lookups (Paulo Alcantara) [RHEL-190706]
- ksmbd: harden file lifetime during session teardown (Paulo Alcantara) [RHEL-190706]
- ksmbd: centralize ksmbd_conn final release to plug transport leak (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: fix MR registration for coalesced SG lists (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce and use include/linux/smbdirect.h (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: make use of DEFAULT_SYMBOL_NAMESPACE and EXPORT_SYMBOL_GPL (Paulo Alcantara) [RHEL-190706]
- cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-190706]
- smb: client: change allocation requirements in smb2_compound_op (Paulo Alcantara) [RHEL-190706]
- ksmbd: rewrite stop_sessions() with restartable iteration (Paulo Alcantara) [RHEL-190706]
- smb: server: handle readdir_info_level_struct_sz() error (Paulo Alcantara) [RHEL-190706]
- smb/client: remove unused smb3_parse_opt() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: move fs/smb/common/smbdirect/ to fs/smb/smbdirect/ (Paulo Alcantara) [RHEL-190706]
- smb: common: add SMB3_COMPRESS_MAX_ALGS (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: add code docs to lz77.c (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: LZ77 optimizations (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: increase LZ77_MATCH_MAX_DIST (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: fix counting in LZ77 match finding (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: fix buffer overrun in lz77_compress() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix (remove) drop_dir_cache module parameter (Paulo Alcantara) [RHEL-190706]
- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Paulo Alcantara) [RHEL-190706]
- smb: server: stop sending fake security descriptors (Paulo Alcantara) [RHEL-190706]
- ksmbd: scope conn-&amp;gt;binding slowpath to bound sessions only (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix CreateOptions sanitization clobbering the whole field (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix O(N^2) DoS in smb2_lock via unbounded LockCount (Paulo Alcantara) [RHEL-190706]
- ksmbd: destroy async_ida in ksmbd_conn_free() (Paulo Alcantara) [RHEL-190706]
- ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() (Paulo Alcantara) [RHEL-190706]
- MAINTAINERS: create entry for smbdirect (Paulo Alcantara) [RHEL-190706]
- ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() (Paulo Alcantara) [RHEL-190706]
- cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: fix bad encoding on last LZ77 flag (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment (Paulo Alcantara) [RHEL-190706]
- ksmbd: use check_add_overflow() to prevent u16 DACL size overflow (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in smb2_open during durable reconnect (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() (Paulo Alcantara) [RHEL-190706]
- smb: server: fix max_connections off-by-one in tcp accept path (Paulo Alcantara) [RHEL-190706]
- ksmbd: require minimum ACE size in smb_check_perm_dacl() (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate response sizes in ipc_validate_msg() (Paulo Alcantara) [RHEL-190706]
- smb: server: fix active_num_conn leak on transport allocation failure (Paulo Alcantara) [RHEL-190706]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_connection_deregister_mr_io unlock while waiting (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: fix the logic in smbdirect_socket_destroy_sync() without an error (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: fix copyright header of smbdirect.h (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: change smbdirect_socket_parameters.{initiator_depth,responder_resources} to __u16 (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: remove unused SMBDIRECT_USE_INLINE_C_FILES logic (Paulo Alcantara) [RHEL-190706]
- smb: server: no longer use smbdirect_socket_set_custom_workqueue() (Paulo Alcantara) [RHEL-190706]
- smb: client: no longer use smbdirect_socket_set_custom_workqueue() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce global workqueues (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: prepare use of dedicated workqueues for different steps (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: remove unused smbdirect_connection_mr_io_recovery_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: wrap rdma_disconnect() in rdma_[un]lock_handler() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_netdev_rdma_capable_mode_type() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_netdev_rdma_capable_mode_type() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect.ko (Paulo Alcantara) [RHEL-190706]
- smb: server: remove unused ksmbd_transport_ops.prepare() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_{listen,accept}() (Paulo Alcantara) [RHEL-190706]
- smb: server: only use public smbdirect functions (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_create_accepting()/smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_{socket_init_accepting,connection_wait_for_connected}() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_send_iter() and related functions (Paulo Alcantara) [RHEL-190706]
- smb: server: let smb_direct_post_send_data() return data_length (Paulo Alcantara) [RHEL-190706]
- smb: server: split out smb_direct_send_iter() out of smb_direct_writev() (Paulo Alcantara) [RHEL-190706]
- smb: server: let smbdirect_map_sges_from_iter() truncate the message boundary (Paulo Alcantara) [RHEL-190706]
- smb: server: inline smb_direct_create_header() into smb_direct_post_send_data() (Paulo Alcantara) [RHEL-190706]
- smb: server: move iov_iter_kvec() out of smb_direct_post_send_data() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_destroy_sync() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of functions from smbdirect_rw.c (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_wait_for_credits() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_get_buf_page_count() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_recv_io_refill[_work]() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_schedule_cleanup() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect.ko (Paulo Alcantara) [RHEL-190706]
- smb: client: only use public smbdirect functions (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_create_kern()/smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_init_new() and smbdirect_connect_sync() (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce and use smbd_debug_proc_show() (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce and use smbd_mr_fill_buffer_descriptor() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_send_{single_iter,immediate_work}() (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send_full_iter() get remaining_length and return data_length (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send_iter() get remaining_length and return data_length (Paulo Alcantara) [RHEL-190706]
- smb: client: change smbd_post_send_empty() to void return (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_destroy_sync() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of functions from smbdirect_mr.c (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_recv_io_refill_work() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: initialize recv_io-&amp;gt;cqe.done = recv_done just once (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_schedule_cleanup() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce the basic smbdirect.ko (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_{listen,accept}() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_bind() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: split out smbdirect_accept_negotiate_finish() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_init_send_batch_storage() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: provide explicit prototypes for cross .c file functions (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_public.h with prototypes (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_internal.h define pr_fmt without SMBDIRECT_USE_INLINE_C_FILES (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_socket.h include all headers for used structures (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_create_{kern,accepting}() and smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_accept_connect_request() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connect[_sync]() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_socket_set_initial_parameters() call rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_init_{new,accepting}() and helpers (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_shutdown() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_is_connected() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_wait_for_connected() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_legacy_debug_proc_show() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_mr_io_fill_buffer_descriptor() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_negotiation_done() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_send_immediate_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_send_iter() and related functions (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_rdma_{established,event_handler}() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_destroy[_sync]() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_recv_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: define SMBDIRECT_RDMA_CM_[RNR_]RETRY (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: define SMBDIRECT_MIN_{RECEIVE,FRAGMENTED}_SIZE (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_rw.c with server rw code (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_mr.c with client mr code (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_wait_for_credits() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_get_buf_page_count() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: split out smbdirect_connection_recv_io_refill() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_recv_io_refill_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_map_sges_from_iter() and helper functions (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.{send,recv}_io.mem.gfp_mask (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: set SMBDIRECT_KEEPALIVE_NONE before disable_delayed_work(&amp;amp;sc-&amp;gt;idle.timer_work); (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection.c to be filled (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_schedule_cleanup[{_lvl,_status}]() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.c to be filled (Paulo Alcantara) [RHEL-190706]
- smb: server: include smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
- smb: client: include smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_internal.h (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
- smb: client: fix integer underflow in receive_encrypted_read() (Paulo Alcantara) [RHEL-190706]
- smb: client: add tracepoints for deferred handle caching (Paulo Alcantara) [RHEL-190706]
- smb: client: add oplock level to smb3_open_done tracepoint (Paulo Alcantara) [RHEL-190706]
- smb: client: add tracepoint for local lock conflicts (Paulo Alcantara) [RHEL-190706]
- smb: client: add tracepoints for lock operations (Paulo Alcantara) [RHEL-190706]
- smb: client: allow both 'lease' and 'nolease' mount options (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: add some logging to SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.logging infrastructure (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect.h include #include &amp;lt;linux/types.h&amp;gt; (Paulo Alcantara) [RHEL-190706]
- smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-190706]
- smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc (Paulo Alcantara) [RHEL-190706]
- ksmbd: require 3 sub-authorities before reading sub_auth[2] (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate EaNameLength in smb2_get_ea() (Paulo Alcantara) [RHEL-190706]
- ksmbd: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate owner of durable handle on reconnect (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger (Paulo Alcantara) [RHEL-190706]
- ksmbd: ipc: use kzalloc_flex and __counted_by (Paulo Alcantara) [RHEL-190706]
- smb: move filesystem_vol_info into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- smb: move file_basic_info into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- smb: move some definitions from common/smb2pdu.h into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- vfs: get rid of BUG_ON() in d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-190706]
- smb: client: get rid of d_drop()+d_add() (Paulo Alcantara) [RHEL-190706]
- smb: client: set ATTR_TEMPORARY with O_TMPFILE | O_EXCL (Paulo Alcantara) [RHEL-190706]
- smb: client: add support for O_TMPFILE (Paulo Alcantara) [RHEL-190706]
- vfs: introduce d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-190706]
- smb: client: add missing MODULE_DESCRIPTION() to smb1maperror_test (Paulo Alcantara) [RHEL-190706]
- smb: client: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-190706]
- smb/client: move smb2maperror declarations to smb2proto.h (Paulo Alcantara) [RHEL-190706]
- smb/client: introduce KUnit tests to check DOS/SRV err mapping search (Paulo Alcantara) [RHEL-190706]
- smb/client: check if SMB1 DOS/SRV error mapping arrays are sorted (Paulo Alcantara) [RHEL-190706]
- smb/client: use binary search for SMB1 DOS/SRV error mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: autogenerate SMB1 DOS/SRV to POSIX error mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: annotate smberr.h with POSIX error codes (Paulo Alcantara) [RHEL-190706]
- smb/client: move ERRnetlogonNotStarted to DOS error class (Paulo Alcantara) [RHEL-190706]
- smb/client: introduce KUnit test to check ntstatus_to_dos_map search (Paulo Alcantara) [RHEL-190706]
- smb/client: check if ntstatus_to_dos_map is sorted (Paulo Alcantara) [RHEL-190706]
- smb/client: use binary search for NT status to DOS mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: refactor ntstatus_to_dos() to return mapping entry (Paulo Alcantara) [RHEL-190706]
- smb/client: replace nt_errs with ntstatus_to_dos_map (Paulo Alcantara) [RHEL-190706]
- smb/client: autogenerate SMB1 NT status to DOS error mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: annotate nterr.h with DOS error codes (Paulo Alcantara) [RHEL-190706]
- smb/client: avoid null-ptr-deref when tests fail in test_cmp_map() (Paulo Alcantara) [RHEL-190706]
- fs/smb/client: add verbose error logging for UNC parsing (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix OOB write in QUERY_INFO for compound requests (Paulo Alcantara) [RHEL-190706]
- netfs: Fix the handling of stream-&amp;gt;front by removing it (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix potencial OOB in get_file_all_info() for compound requests (Paulo Alcantara) [RHEL-190706]
- smb/client: ensure smb2_mapping_table rebuild on cmd changes (Paulo Alcantara) [RHEL-190706]
- ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix memory leaks and NULL deref in smb2_lock() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() (Paulo Alcantara) [RHEL-190706]
- ksmbd: do not expire session on binding failure (Paulo Alcantara) [RHEL-190706]
- smb: client: fix generic/694 due to wrong -&amp;gt;i_blocks (Paulo Alcantara) [RHEL-190706]
- netfs: Fix read abandonment during retry (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in durable v2 replay of active file handles (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of share_conf in compound request (Paulo Alcantara) [RHEL-190706]
- ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION (Paulo Alcantara) [RHEL-190706]
- ksmbd: unset conn-&amp;gt;binding on failed binding request (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix share_conf UAF in tree_conn disconnect (Paulo Alcantara) [RHEL-190706]
- cifs: smb1: fix comment typo (Paulo Alcantara) [RHEL-190706]
- smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix iface port assignment in parse_server_interfaces (Paulo Alcantara) [RHEL-190706]
- smb/client: only export symbol for 'smb2maperror-test' module (Paulo Alcantara) [RHEL-190706]
- smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-190706]
- smb: client: fix atomic open with O_DIRECT &amp;amp; O_SYNC (Paulo Alcantara) [RHEL-190706]
- netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry (Paulo Alcantara) [RHEL-190706]
- netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (Paulo Alcantara) [RHEL-190706]
- ksmbd: Don't log keys in SMB3 signing and encryption key generation (Paulo Alcantara) [RHEL-190706]
- smb: server: fix use-after-free in smb2_open() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free by using call_rcu() for oplock_info (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in proc_show_files due to early rcu_read_unlock (Paulo Alcantara) [RHEL-190706]
- smb/server: Fix another refcount leak in smb2_open() (Paulo Alcantara) [RHEL-190706]
- cifs: open files should not hold ref on superblock (Paulo Alcantara) [RHEL-190706]
- smb: update some doc references (Paulo Alcantara) [RHEL-190706]
- smb/client: make SMB2 maperror KUnit tests a separate module (Paulo Alcantara) [RHEL-190706]
- smb: client: Use snprintf in cifs_set_cifscreds (Paulo Alcantara) [RHEL-190706]
- smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Paulo Alcantara) [RHEL-190706]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-190706]
- netfs: Fix unbuffered/DIO writes to dispatch subrequests in strict sequence (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix signededness bug in smb_direct_prepare_negotiation() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix cifs_pick_channel when channels are equally loaded (Paulo Alcantara) [RHEL-190706]
- Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [cifs] (Paulo Alcantara) [RHEL-190706]
- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [cifs] (Paulo Alcantara) [RHEL-190706]
- Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [cifs] (Paulo Alcantara) [RHEL-190706]
- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [cifs] (Paulo Alcantara) [RHEL-190706]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [cifs] (Paulo Alcantara) [RHEL-190706]
- smb: client: terminate session upon failed client required signing (Paulo Alcantara) [RHEL-190706]
- smb: server: Remove duplicate include of misc.h (Paulo Alcantara) [RHEL-190706]
- cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
- smb/client: move NT_STATUS_MORE_ENTRIES (Paulo Alcantara) [RHEL-190706]
- smb/client: rename to NT_ERROR_INVALID_DATATYPE (Paulo Alcantara) [RHEL-190706]
- smb/client: rename to NT_STATUS_SOME_NOT_MAPPED (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_PRIVILEGE_NOT_HELD (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_MORE_PROCESSING_REQUIRED (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_BUFFER_OVERFLOW (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_NOTIFY_ENUM_DIR (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Remove duplicate include of cifs_debug.h (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix non-IPv6 build (Paulo Alcantara) [RHEL-190706]
- smb client: Add generated file to gitignore file (Paulo Alcantara) [RHEL-190706]
- ksmbd: convert tree_conns_lock to rw_semaphore (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix missing chann_lock while iterating session channel list (Paulo Alcantara) [RHEL-190706]
- ksmbd: add chann_lock to protect ksmbd_chann_list xarray (Paulo Alcantara) [RHEL-190706]
- cifs: Fix the copyright banner on smb1maperror.c (Paulo Alcantara) [RHEL-190706]
- smb: common: add header guards to fs/smb/common/smb2status.h (Paulo Alcantara) [RHEL-190706]
- smb: client: Avoid a dozen -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-190706]
- smb/client: remove useless comment in mapping_table_ERRSRV (Paulo Alcantara) [RHEL-190706]
- smb/client: remove some literal NT error codes from ntstatus_to_dos_map (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_VOLUME_NOT_UPGRADED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_NO_USER_KEYS (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_WRONG_EFS (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_NO_EFS (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_NO_RECOVERY_POLICY (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_RANGE_NOT_FOUND (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_DECRYPTION_FAILED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_ENCRYPTION_FAILED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_DIRECTORY_IS_A_REPARSE_POINT (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_VOLUME_DISMOUNTED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_VARIABLE_NOT_FOUND (Paulo Alcantara) [RHEL-190706]
- smb/client: rename ERRinvlevel to ERRunknownlevel (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_OS2_INVALID_LEVEL (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_INVALID_INFO_CLASS to ERRbadpipe (Paulo Alcantara) [RHEL-190706]
- smb/client: introduce KUnit test to check search result of smb2_error_map_table (Paulo Alcantara) [RHEL-190706]
- smb/client: use bsearch() to find target in smb2_error_map_table (Paulo Alcantara) [RHEL-190706]
- smb/client: check whether smb2_error_map_table is sorted in ascending order (Paulo Alcantara) [RHEL-190706]
- cifs: Autogenerate SMB2 error mapping table (Paulo Alcantara) [RHEL-190706]
- smb: server: correct value for smb_direct_max_fragmented_recv_size (Paulo Alcantara) [RHEL-190706]
- smb: client: correct value for smbd_max_fragmented_recv_size (Paulo Alcantara) [RHEL-190706]
- smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() (Paulo Alcantara) [RHEL-190706]
- ksmbd: add procfs interface for runtime monitoring and statistics (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
- smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-190706]
- smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-190706]
- smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-190706]
- smb: client: remove pointless sc-&amp;gt;send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-190706]
- smb: client: remove pointless sc-&amp;gt;recv_io.credits.count rollback (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send() make use of request-&amp;gt;wr (Paulo Alcantara) [RHEL-190706]
- smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
- smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-190706]
- smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-190706]
- smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
- cifs: Label SMB2 statuses with errors (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Make BCC accessors conditional (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: connect.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: sess.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: cifsencrypt.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: netmisc.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: misc.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: cifs_debug.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move inline funcs (Paulo Alcantara) [RHEL-190706]
- cifs: Fix cifs_dump_mids() to call -&amp;gt;dump_detail (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Don't return smb_hdr from cifs_{,small_}buf_get() (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move BCC access functions (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Adjust #includes (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Split SMB1 protocol defs into smb1pdu.h (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Add some #includes (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move some SMB1 received PDU checking bits to smb1transport.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move some SMB1 receive bits to smb1transport.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Create smb1proto.h for SMB1 declarations (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Rename cifstransport.c (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/ntlmssp.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/reparse.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/smb2proto.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_debug.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_swn.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/compress.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_spnego.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/fs_context.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/dns_resolve.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/dfs_cache.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/netlink.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_unicode.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/dfs.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cached_dir.h (Paulo Alcantara) [RHEL-190706]
- smb: client: add multichannel async work for CONFIG_CIFS_DFS_UPCALL=n (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce multichannel async work during mount (Paulo Alcantara) [RHEL-190706]
- smb: server: reset smb_direct_port = SMB_DIRECT_PORT_INFINIBAND on init (Paulo Alcantara) [RHEL-190706]
- ksmbd: smbd: fix dma_unmap_sg() nents (Paulo Alcantara) [RHEL-190706]
- nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks (Maurizio Lombardi) [RHEL-194153]
- tls: Preserve sk_err across recvmsg() when data has been copied (Sabrina Dubroca) [RHEL-152729]
- net: tls: prevent chain-after-chain in plain text SG (Sabrina Dubroca) [RHEL-152729]
- net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Sabrina Dubroca) [RHEL-152729]
- net: tls: fix silent data drop under pipe back-pressure (Sabrina Dubroca) [RHEL-152729]
- net: tls: fix strparser anchor skb leak on offload RX setup failure (Sabrina Dubroca) [RHEL-152729]
- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Sabrina Dubroca) [RHEL-152729]
- tls: Purge async_hold in tls_decrypt_async_wait() (Sabrina Dubroca) [RHEL-152729]
- tls: Fix race condition in tls_sw_cancel_work_tx() (Sabrina Dubroca) [RHEL-154841] {CVE-2026-23240}
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Sabrina Dubroca) [RHEL-189560] {CVE-2025-40149}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189578] {CVE-2025-71113}
- e1000e: limit endianness conversion to boundary words (Michal Schmidt) [RHEL-186602]
- e1000: limit endianness conversion to boundary words (Michal Schmidt) [RHEL-186602]
- e1000e: Use __napi_schedule_irqoff() (Michal Schmidt) [RHEL-186602]
- e1000e: use ktime_get_real_ns() in e1000e_systim_reset() (Michal Schmidt) [RHEL-186602]
- net: Consistently define pci_device_ids using named initializers [e1000e] (Michal Schmidt) [RHEL-186602]
- e1000e: Unroll PTP in probe error handling (Michal Schmidt) [RHEL-186602]
- e1000: check return value of e1000_read_eeprom (Michal Schmidt) [RHEL-186602]
- e1000/e1000e: Fix leak in DMA error cleanup (Michal Schmidt) [RHEL-186602]
- e1000e: clear DPG_EN after reset to avoid autonomous power-gating (Michal Schmidt) [RHEL-186602]
- e1000e: introduce new board type for Panther Lake PCH (Michal Schmidt) [RHEL-186602]
- Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
- e1000e: Switch to use %ptSp (Michal Schmidt) [RHEL-186602]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186335]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186335]
- net: wwan: t7xx: Add delay between MD and SAP suspend (Jose Ignacio Tornos Martinez) [RHEL-155042]
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180156] {CVE-2026-46117}
- dt-bindings: input: add debounce-delay-ms common property (Tony Camuso) [RHEL-176366]
- dt-bindings: Update Sasha Finkelstein's email address (Tony Camuso) [RHEL-176366]
- MIPS/input: Move RB532 button to GPIO descriptors (Tony Camuso) [RHEL-176366]
- Input: uinput - take event lock when submitting FF request "event" (Tony Camuso) [RHEL-176366]
- Input: uinput - fix circular locking dependency with ff-core (Tony Camuso) [RHEL-176366]
- Input: aiptek - validate raw macro indices before updating state (Tony Camuso) [RHEL-176366]
- Input: synaptics_usb - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
- Input: appletouch - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
- Input: keyspan-remote - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
- Input: aiptek - use HID headers (Tony Camuso) [RHEL-176366]
- Input: wm97xx - use guard notation when acquiring mutex (Tony Camuso) [RHEL-176366]
- Input: mk712 - use guard notation when acquiring spinlock (Tony Camuso) [RHEL-176366]
- Input: elo - use guard notation when acquiring mutex (Tony Camuso) [RHEL-176366]
- dt-bindings: input: matrix-keymap: fix key board wording (Tony Camuso) [RHEL-176366]
- Input: atlas - check ACPI_COMPANION() against NULL (Tony Camuso) [RHEL-176366]
- Input: atlas - convert ACPI driver to a platform one (Tony Camuso) [RHEL-176366]
- input: trackpoint - Enable doubletap by default on capable devices (Tony Camuso) [RHEL-176366]
- Input: psmouse - remove dedicated kpsmoused workqueue (Tony Camuso) [RHEL-176366]
- Input: alps - use standard workqueue when registering supplemental device (Tony Camuso) [RHEL-176366]
- Input: psmouse - replace flush_workqueue() with disable_delayed_work_sync() (Tony Camuso) [RHEL-176366]
- Input: atkbd - fix various formatting issues (Tony Camuso) [RHEL-176366]
- Input: atkbd - switch to using explicitly sized types (Tony Camuso) [RHEL-176366]
- Input: atkbd - use dev_warn_ratelimited() (Tony Camuso) [RHEL-176366]
- Input: atkbd - use __free() cleanup facility in when parsing FW keymap (Tony Camuso) [RHEL-176366]
- Input: atkbd - validate scancode in firmware keymap entries (Tony Camuso) [RHEL-176366]
- dt-bindings: input: Add Parade TC3408 touchscreen controller (Tony Camuso) [RHEL-176366]
- Input: export input_default_setkeycode (Tony Camuso) [RHEL-176366]
- Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table (Tony Camuso) [RHEL-176366]
- Input: bcm5974 - recover from failed mode switch (Tony Camuso) [RHEL-176366]
- Input: libps2 - embed WARN_ON(1) macros into their enclosing if statements (Tony Camuso) [RHEL-176366]
- dt-bindings: input: qcom,pm8941-pwrkey: Document PMM8654AU (Tony Camuso) [RHEL-176366]
- dt-bindings: input: touchscreen: imagis: allow linux,keycodes for ist3038 (Tony Camuso) [RHEL-176366]
- dt-bindings: Fix emails with spaces or missing brackets (Tony Camuso) [RHEL-176366]
- docs: fix 're-use' -&amp;gt; 'reuse' in documentation (Tony Camuso) [RHEL-176366]
- Input: gpio_keys - fall back to platform_get_irq() for interrupt-only keys (Tony Camuso) [RHEL-176366]
- Input: i8042 - add quirks for MECHREVO Wujie 15X Pro (Tony Camuso) [RHEL-176366]
- Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA (Tony Camuso) [RHEL-176366]
- Documentation: use a source-read extension for the index link boilerplate (Tony Camuso) [RHEL-176366]
- Input: appletouch - fix potential race between resume and open (Tony Camuso) [RHEL-176366]
- dt-bindings: input: i2c-hid: Introduce FocalTech FT8112 (Tony Camuso) [RHEL-176366]
- Input: synaptics_i2c - switch to using managed resources (Tony Camuso) [RHEL-176366]
- Input: synaptics_i2c - guard polling restart in resume (Tony Camuso) [RHEL-176366]
- kernel.h: drop hex.h and update all hex.h users (Tony Camuso) [RHEL-176366]
- Input: serio - complete sizeof(*pointer) conversions (Tony Camuso) [RHEL-176366]
- Input: elo - switch to use scnprintf() to suppress truncation warning (Tony Camuso) [RHEL-176366]
- Input: adp5589 - remove a leftover header file (Tony Camuso) [RHEL-176366]
- doc: input: fix typos in input.rst (Tony Camuso) [RHEL-176366]
- Input: add ABS_SND_PROFILE (Tony Camuso) [RHEL-176366]
- Input: psmouse-smbus - add WQ_UNBOUND to alloc_workqueue user (Tony Camuso) [RHEL-176366]
- Input: synaptics_i2c - replace use of system_wq with system_dfl_wq (Tony Camuso) [RHEL-176366]
- Input: gpio_keys - replace use of system_wq with system_dfl_wq (Tony Camuso) [RHEL-176366]
- Input: alps - fix use-after-free bugs caused by dev3_register_work (Tony Camuso) [RHEL-176366]
- dt-bindings: Updates Linus Walleij's mail address (Tony Camuso) [RHEL-176366]
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table (Tony Camuso) [RHEL-176366]
- Input: atkbd - skip deactivate for HONOR FMB-P's internal keyboard (Tony Camuso) [RHEL-176366]
- Input: cyapa - remove redundant pm_runtime_mark_last_busy() calls (Tony Camuso) [RHEL-176366]
- Input: byd - use %*ph for Z packet dump (Tony Camuso) [RHEL-176366]
- dt-bindings: Remove extra blank lines (Tony Camuso) [RHEL-176366]
- dt-bindings: Update Krzysztof Kozlowski's email (Tony Camuso) [RHEL-176366]
- dt-bindings: touchscreen: consolidate simple touch controller to trivial-touch.yaml (Tony Camuso) [RHEL-176366]
- Input: MT - add INPUT_MT_TOTAL_FORCE flags (Tony Camuso) [RHEL-176366]
- Input: rename INPUT_PROP_HAPTIC_TOUCHPAD to INPUT_PROP_PRESSUREPAD (Tony Camuso) [RHEL-176366]
- Input: add INPUT_PROP_HAPTIC_TOUCHPAD (Tony Camuso) [RHEL-176366]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-cross-headers-6.12.0-257.el10.aarch64</title>
      <pubDate>Thu, 06 Aug 2026 12:12:38 PM GMT</pubDate>
      <guid isPermaLink="false">d579accca80a49ee545fb5a8bd5438ca50128e246a9a53041b885efd38f15770</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/kernel-cross-headers-6.12.0-257.el10.aarch64.rpm</link>
      <description><p><strong>kernel-cross-headers</strong> - Header files for the Linux kernel for use by cross-glibc&lt;br /&gt;</p>

<p>Kernel-cross-headers includes the C header files that specify the interface&lt;br /&gt;
between the Linux kernel and userspace libraries and programs.  The&lt;br /&gt;
header files define structures and constants that are needed for&lt;br /&gt;
building most standard programs and are also needed for rebuilding the&lt;br /&gt;
cross-glibc package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 06 Aug 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-257.el10]
- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562]
- wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079]
- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634]
- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358]
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430]
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345]
- PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011]
- PCI: Align head space better (Myron Stowe) [RHEL-178011]
- PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011]
- parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011]
- MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011]
- resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011]
- resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011]
- PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011]
- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011]
- resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011]
- resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011]
- kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011]
- resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011]
- resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011]
- resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011]
- resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011]
- selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873]
- dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873]
- tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873]
- tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873]
- net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873]
- net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873]
- selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873]
- selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873]
- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625]

Wed, 05 Aug 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-256.el10]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996]
- kselftest/arm64: Handle attempts to disable SM on SME only systems (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Test SME on SME only systems in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- arm64: mm: Cast start/end markers to char *, not u64 (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Cover disabling streaming mode without SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Don't open code SVE_PT_SIZE() in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Fix SVE write data generation for SME only systems (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Test FPSIMD format data writes via NT_ARM_SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- kselftst/arm64: Test NT_ARM_SVE FPSIMD format writes on non-SVE systems (Steve Dunnagan) [RHEL-158921]
- arm64/sysreg: Replace TCR_EL1 field macros (Steve Dunnagan) [RHEL-158921]
- arm64: mm: Represent physical memory with phys_addr_t and resource_size_t (Steve Dunnagan) [RHEL-158921]
- arm64: mm: Make map_fdt() return mapped pointer (Steve Dunnagan) [RHEL-158921]
- arm64/fpsimd: signal: Fix restoration of SVE context (Steve Dunnagan) [RHEL-158921]
- arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (Steve Dunnagan) [RHEL-158921]
- arm64/fpsimd: ptrace: Fix SVE writes on !SME systems (Steve Dunnagan) [RHEL-158921]
- arm64: Fix cleared E0POE bit after cpu_suspend()/resume() (Steve Dunnagan) [RHEL-158921]
- arm64/gcs: Flush the GCS locking state on exec (Steve Dunnagan) [RHEL-158921]
- arm64/sysreg: Remove unused define ARM64_FEATURE_FIELD_BITS (Steve Dunnagan) [RHEL-158921]
- arm64/sme: Support disabling streaming mode via ptrace on SME only systems (Steve Dunnagan) [RHEL-158921]
- arm64: Fix typos and spelling errors in comments (Steve Dunnagan) [RHEL-158921]
- arm64: Fix double word in comments (Steve Dunnagan) [RHEL-158921]
- arm64: atomics: lse: Remove unused parameters from ATOMIC_FETCH_OP_AND macros (Steve Dunnagan) [RHEL-158921]
- arm64: remove duplicate ARCH_HAS_MEM_ENCRYPT (Steve Dunnagan) [RHEL-158921]
- arm64: add unlikely hint to MTE async fault check in el0_svc_common (Steve Dunnagan) [RHEL-158921]
- arm64: acpi: add newline to deferred APEI warning (Steve Dunnagan) [RHEL-158921]
- arm64/mm: Ensure PGD_SIZE is aligned to 64 bytes when PA_BITS = 52 (Steve Dunnagan) [RHEL-158921]
- arm64/mm: Drop cpu_set_[default|idmap]_tcr_t0sz() (Steve Dunnagan) [RHEL-158921]
- arm64: remove unused ARCH_PFN_OFFSET (Steve Dunnagan) [RHEL-158921]
- arm64: use SOFTIRQ_ON_OWN_STACK for enabling softirq stack (Steve Dunnagan) [RHEL-158921]
- arm64: Remove assertion on CONFIG_VMAP_STACK (Steve Dunnagan) [RHEL-158921]
- uaccess: Provide ASM GOTO safe wrappers for unsafe_*_user() (Steve Dunnagan) [RHEL-158921]
- arm64: uaccess: Use unsafe wrappers for ASM GOTO (Steve Dunnagan) [RHEL-158921]
- igc: fix typos in comments (Michal Schmidt) [RHEL-186597]
- igc: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-186597]
- igc: skip RX timestamp header for frame preemption verification (Michal Schmidt) [RHEL-186597]
- igc: fix potential skb leak in igc_fpe_xmit_smd_frame() (Michal Schmidt) [RHEL-186597]
- igc: set tx buffer type for SMD frames (Michal Schmidt) [RHEL-186597]
- net: Consistently define pci_device_ids using named initializers [igc] (Michal Schmidt) [RHEL-186597]
- igc: fix page fault in XDP TX timestamps handling (Michal Schmidt) [RHEL-186597]
- igc: fix missing update of skb-&amp;gt;tail in igc_xmit_frame() (Michal Schmidt) [RHEL-186597]
- igc: Fix trigger of incorrect irq in igc_xsk_wakeup function (Michal Schmidt) [RHEL-186597]
- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [igc] (Michal Schmidt) [RHEL-186597]
- Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igc] (Michal Schmidt) [RHEL-186597]
- igb: fix typos in comments (Michal Schmidt) [RHEL-177449]
- igb: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-177449]
- igb: use ktime_get_real helpers in igb_ptp_reset() (Michal Schmidt) [RHEL-177449]
- net: Consistently define pci_device_ids using named initializers [igb,igbvf] (Michal Schmidt) [RHEL-177449]
- igb: remove napi_synchronize() in igb_down() (Michal Schmidt) [RHEL-177449]
- igb: Fix trigger of incorrect irq in igb_xsk_wakeup (Michal Schmidt) [RHEL-177449]
- Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [igb] (Michal Schmidt) [RHEL-177449]
- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igb,igbvf] (Michal Schmidt) [RHEL-177449]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igb,igbvf] (Michal Schmidt) [RHEL-177449]
- igb: Switch to use %ptSp (Michal Schmidt) [RHEL-177449]
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175863] {CVE-2024-53143}
- scsi: mpt3sas: Limit NVMe request size to 2 MiB (Chandrakanth Patil) [RHEL-141216] {CVE-2026-46105}
- scsi: mpt3sas: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Add configurable command retry limit for slow-to-respond devices (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Add firmware event requeue support for busy devices (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Improve device discovery and readiness handling for slow devices (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Added no_turs flag to device unblock logic (Chandrakanth Patil) [RHEL-141216]
- scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Fix typo and grammar (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Fix typo (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add retry mechanism for IOC shutdown with timeout reset (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add queue-full tracking for operational request queues (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Reset controller on invalid I/O completion (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Chandrakanth Patil) [RHEL-141215] {CVE-2026-43473}
- scsi: mpi3mr: Make driver probing asynchronous (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Driver version update to 8.17.0.3.50 (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Record and report controller firmware faults (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Update MPI Headers to revision 39 (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Use negotiated link rate from DevicePage0 (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Avoid redundant diag-fault resets (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Rename log data save helper to reflect threaded/BH context (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add module parameter to control threaded IRQ polling (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Prevent duplicate SAS/SATA device entries in channel 1 (Chandrakanth Patil) [RHEL-141215]

Tue, 04 Aug 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-255.el10]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-169756]
- xfrm: esp: restore combined single-frag length gate (Xin Long) [RHEL-178329]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Xin Long) [RHEL-180168] {CVE-2026-46116}
- espintcp: Fix race condition in espintcp_close() (Xin Long) [RHEL-154898] {CVE-2026-23239}
- pseries/lparcfg: Add resource group monitoring (Mamatha Inamdar) [RHEL-217019]
- nvme-apple: drop invalid put of admin queue reference count (Maurizio Lombardi) [RHEL-54175]
- nvme-core: warn on allocating admin tag set with existing queue (Maurizio Lombardi) [RHEL-54175]
- nvme-core: fix unsigned comparison warning in nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-54175]
- nvmet-loop: do not alloc admin tag set during reset (Maurizio Lombardi) [RHEL-54175]
- nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl (Maurizio Lombardi) [RHEL-54175]
- nvme: add sysfs attribute to change IO timeout per controller (Maurizio Lombardi) [RHEL-54175]
- nvme: add sysfs attribute to change admin timeout per nvme controller (Maurizio Lombardi) [RHEL-54175]
- nvme: remove redundant timeout argument from nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-54175]
- nvme: Let the blocklayer set timeouts for requests (Maurizio Lombardi) [RHEL-54175]
- ata: libata-pmp: add JMicron JMS562 quirk (Tomas Henzl) [RHEL-157217]
- ata: libata-core: disable LPM on ADATA SU680 SSD (Tomas Henzl) [RHEL-157217]
- ata: libata-core: Disable LPM on ST1000DM010-2EP102 (Tomas Henzl) [RHEL-157217]
- ata: libata-core: Disable LPM on ST2000DM008-2FR102 (Tomas Henzl) [RHEL-157217]
- ata: libata: Fix ata_exec_internal() (Tomas Henzl) [RHEL-157217]
- ata: libata-eh: Do not retry reset if the device is gone (Tomas Henzl) [RHEL-157217]
- ata: libata: avoid long timeouts on hot-unplugged SATA DAS (Tomas Henzl) [RHEL-157217]
- ata: libata-eh: avoid unnecessary calls to ata_scsi_port_error_handler() (Tomas Henzl) [RHEL-157217]
- ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 (Tomas Henzl) [RHEL-157217]
- ata: ahci: Do not read the per port area for unimplemented ports (Tomas Henzl) [RHEL-157217]
- ata: ahci: fail probe if BAR too small for claimed ports (Tomas Henzl) [RHEL-157217]
- scsi: core: wake eh reliably when using scsi_schedule_eh (David Jeffery) [RHEL-208594]
- ksmbd: fix memory leak of xattr_stream_name in smb2_rename() (Paulo Alcantara) [RHEL-190706]
- ksmbd: zero the smb2_read alignment tail to avoid an infoleak (Paulo Alcantara) [RHEL-190706]
- ksmbd: pin conn during async oplock break notification (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix integer overflow in set_file_allocation_info() (Paulo Alcantara) [RHEL-190706]
- smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-190706]
- smb: client: reject overlapping data areas in SMB2 responses (Paulo Alcantara) [RHEL-190706]
- smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-190706]
- smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-190706]
- smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-190706]
- smb/client: handle overlapping allocated ranges in fallocate (Paulo Alcantara) [RHEL-190706]
- smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-190706]
- smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-190706]
- redhat/configs: enable CONFIG_CIFS_SMB_DIRECT (Paulo Alcantara) [RHEL-190706]
- redhat/configs: disable CONFIG_SMB_KUNIT_TESTS (Paulo Alcantara) [RHEL-190706]
- scatterlist: Fix offset in folio calc in extract_xarray_to_sg() (Paulo Alcantara) [RHEL-190706]
- iov_iter: Fix a memory leak in iov_iter_extract_user_pages() (Paulo Alcantara) [RHEL-190706]
- iov_iter: Fix missing alloc fail check in iov_iter_extract_bvec_pages() (Paulo Alcantara) [RHEL-190706]
- iov_iter: Fix potential underflow in iov_iter_extract_xarray_pages() (Paulo Alcantara) [RHEL-190706]
- cachefiles: Fix double fput (Paulo Alcantara) [RHEL-190706]
- smb: client: mask server-provided mode to 07777 in modefromsid (Paulo Alcantara) [RHEL-190706]
- smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-190706]
- smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-190706]
- smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-190706]
- smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix overflow in passthrough ioctl bounds check (Paulo Alcantara) [RHEL-190706]
- smb: client: fix busy dentry warning on unmount after DIO (Paulo Alcantara) [RHEL-190706]
- cifs: Fix support for creating SFU fifo (Paulo Alcantara) [RHEL-190706]
- cifs: Fix support for creating SFU socket (Paulo Alcantara) [RHEL-190706]
- smb: client: fix atime clamp check in read completion (Paulo Alcantara) [RHEL-190706]
- cifs: validate DFS referral string offsets (Paulo Alcantara) [RHEL-190706]
- smb: client: use GFP_KERNEL for DFS cache allocations (Paulo Alcantara) [RHEL-190706]
- smb: client: restrict implied bcc[0] exemption to responses without data area (Paulo Alcantara) [RHEL-190706]
- smb: client: preserve leading slash for POSIX absolute symlink targets (Paulo Alcantara) [RHEL-190706]
- smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix barriering when walking subrequest list (Paulo Alcantara) [RHEL-190706]
- cifs: Fix missing credit release on failure in cifs_issue_read() (Paulo Alcantara) [RHEL-190706]
- cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
- smb: client: use unaligned reads in parse_posix_ctxt() (Paulo Alcantara) [RHEL-190706]
- smb: client: harden POSIX SID length parsing (Paulo Alcantara) [RHEL-190706]
- netfs: Fix DIO write retry for filesystems without a -&amp;gt;prepare_write() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix folio state after ENOMEM whilst under writeback iteration (Paulo Alcantara) [RHEL-190706]
- netfs: Fix writeback error handling (Paulo Alcantara) [RHEL-190706]
- netfs: Fix writethrough to use collection offload (Paulo Alcantara) [RHEL-190706]
- netfs: Replace wb_lock with a bit lock for asynchronicity (Paulo Alcantara) [RHEL-190706]
- netfs: Fix kdoc warning (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_create_write_req() to handle async cache object creation (Paulo Alcantara) [RHEL-190706]
- netfs: Fix decision whether to disallow write-streaming due to fscache use (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix app-instance durable supersede session UAF (Paulo Alcantara) [RHEL-190706]
- ksmbd: snapshot previous oplock state before durable checks (Paulo Alcantara) [RHEL-190706]
- ksmbd: close superseded durable handles through refcount handoff (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of fp-&amp;gt;owner.name in durable handle owner check (Paulo Alcantara) [RHEL-190706]
- smb/server: do not require delete access for non-replacing links (Paulo Alcantara) [RHEL-190706]
- ksmbd: don't hold ci-&amp;gt;m_lock while waiting for a lease break ack (Paulo Alcantara) [RHEL-190706]
- ksmbd: annotate oplock list traversals under m_lock (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix outstanding credit leak on abort and error paths (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix credit charge calculation for SMB2 QUERY_INFO (Paulo Alcantara) [RHEL-190706]
- ksmbd: avoid zeroing the read buffer in smb2_read() (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl (Paulo Alcantara) [RHEL-190706]
- ksmbd: reject undersized DACLs before parsing ACEs (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr (Paulo Alcantara) [RHEL-190706]
- ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr (Paulo Alcantara) [RHEL-190706]
- cifs: define variable sized buffer for querydir responses (Paulo Alcantara) [RHEL-190706]
- smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-190706]
- smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-190706]
- smb: client: Fix next buffer leak in receive_encrypted_standard() (Paulo Alcantara) [RHEL-190706]
- smb/client: use %pe to print error pointer (Paulo Alcantara) [RHEL-190706]
- smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-190706]
- smb common: add missing AAPL defines (Paulo Alcantara) [RHEL-190706]
- smb/client: fix chown/chgrp with SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-190706]
- smb/client: fix security flag calculation when setting security descriptors (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix kernel-doc warnings in smb2_lease_break_noti() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix inconsistent indenting warnings (Paulo Alcantara) [RHEL-190706]
- ksmbd: increase SMB3_DEFAULT_TRANS_SIZE from 1MB to 4MB (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix UBSAN array-index-out-of-bounds in decode_compress_ctxt() (Paulo Alcantara) [RHEL-190706]
- ksmbd: sleep interruptibly in the durable handle scavenger (Paulo Alcantara) [RHEL-190706]
- ksmbd: start file id allocation at 1 (Paulo Alcantara) [RHEL-190706]
- ksmbd: treat read-control opens as stat opens only for leases (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate :: stream type against directory create (Paulo Alcantara) [RHEL-190706]
- ksmbd: break conflicting-open leases only as far as needed (Paulo Alcantara) [RHEL-190706]
- ksmbd: break handle caching for share conflicts (Paulo Alcantara) [RHEL-190706]
- ksmbd: normalize ungrantable lease states (Paulo Alcantara) [RHEL-190706]
- ksmbd: return oplock protocol error for level II ack (Paulo Alcantara) [RHEL-190706]
- ksmbd: avoid level II oplock break notification on unlink (Paulo Alcantara) [RHEL-190706]
- ksmbd: downgrade oplock after break timeout (Paulo Alcantara) [RHEL-190706]
- ksmbd: apply create security descriptor first (Paulo Alcantara) [RHEL-190706]
- ksmbd: return requested create allocation size (Paulo Alcantara) [RHEL-190706]
- ksmbd: tighten create file attribute validation (Paulo Alcantara) [RHEL-190706]
- ksmbd: reject empty-attribute synchronize-only create (Paulo Alcantara) [RHEL-190706]
- ksmbd: honor stream delete sharing for base file (Paulo Alcantara) [RHEL-190706]
- ksmbd: send pending interim for last compound I/O (Paulo Alcantara) [RHEL-190706]
- ksmbd: return success for deferred final close (Paulo Alcantara) [RHEL-190706]
- ksmbd: preserve compound responses for chained errors (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate handle for create or get object id (Paulo Alcantara) [RHEL-190706]
- ksmbd: propagate failed command status in related compounds (Paulo Alcantara) [RHEL-190706]
- ksmbd: deny renaming directory with open children (Paulo Alcantara) [RHEL-190706]
- ksmbd: check parent directory sharing conflicts on rename (Paulo Alcantara) [RHEL-190706]
- ksmbd: preserve open change time across rename (Paulo Alcantara) [RHEL-190706]
- ksmbd: handle durable v2 app instance id (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable reconnect context parsing (Paulo Alcantara) [RHEL-190706]
- ksmbd: invalidate durable handles on oplock break (Paulo Alcantara) [RHEL-190706]
- ksmbd: supersede disconnected delete-on-close durable handle (Paulo Alcantara) [RHEL-190706]
- ksmbd: handle missing create contexts for lease opens (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of conn-&amp;gt;preauth_info in concurrent SMB2 NEGOTIATE (Paulo Alcantara) [RHEL-190706]
- ksmbd: keep common response iovecs in the work item (Paulo Alcantara) [RHEL-190706]
- ksmbd: route v2 lease breaks on the client lease channel (Paulo Alcantara) [RHEL-190706]
- ksmbd: break RH leases before delete-on-close (Paulo Alcantara) [RHEL-190706]
- ksmbd: honor SMB2 v2 lease epochs (Paulo Alcantara) [RHEL-190706]
- ksmbd: do not wait for RH lease break ack on overwrite (Paulo Alcantara) [RHEL-190706]
- ksmbd: chain pending lease breaks before waking waiters (Paulo Alcantara) [RHEL-190706]
- ksmbd: compute lease break-in-progress flag on response (Paulo Alcantara) [RHEL-190706]
- ksmbd: treat unnamed DATA stream as base file (Paulo Alcantara) [RHEL-190706]
- ksmbd: align SMB2 oplock break ack handling (Paulo Alcantara) [RHEL-190706]
- ksmbd: share SMB2 lease state across opens (Paulo Alcantara) [RHEL-190706]
- ksmbd: clean up lease response flags and directory leases (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix lease break and ack state handling (Paulo Alcantara) [RHEL-190706]
- ksmbd: use connection ClientGUID for lease lookup (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate SMB2 lease create contexts (Paulo Alcantara) [RHEL-190706]
- smb/server: fix debug log endianness in smb2_cancel() (Paulo Alcantara) [RHEL-190706]
- ksmbd: track the connection owning a byte-range lock (Paulo Alcantara) [RHEL-190706]
- smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix query directory replay double-free (Paulo Alcantara) [RHEL-190706]
- smb: client: fix change notify replay double-free (Paulo Alcantara) [RHEL-190706]
- smb: client: fix query_info() replay double-free (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_ioctl() replay (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_open() replay (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_flush() replay (Paulo Alcantara) [RHEL-190706]
- ksmbd: use opener credentials for FSCTL mutations (Paulo Alcantara) [RHEL-190706]
- ksmbd: use opener credentials for ADS I/O (Paulo Alcantara) [RHEL-190706]
- ksmbd: require source read access for duplicate extents (Paulo Alcantara) [RHEL-190706]
- ksmbd: run set info with opener credentials (Paulo Alcantara) [RHEL-190706]
- ksmbd: use opener credentials for delete-on-close (Paulo Alcantara) [RHEL-190706]
- ksmbd: serialize QUERY_DIRECTORY requests per file (Paulo Alcantara) [RHEL-190706]
- ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE (Paulo Alcantara) [RHEL-190706]
- ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION (Paulo Alcantara) [RHEL-190706]
- ksmbd: reject non-VALID session in compound request branch (Paulo Alcantara) [RHEL-190706]
- ksmbd: compress SMB2 READ responses (Paulo Alcantara) [RHEL-190706]
- ksmbd: negotiate and decode SMB2 compression (Paulo Alcantara) [RHEL-190706]
- cifs: negotiate chained SMB2 compression capabilities (Paulo Alcantara) [RHEL-190706]
- smb: add common SMB2 compression transform helpers (Paulo Alcantara) [RHEL-190706]
- smb: move LZ77 compression into common code (Paulo Alcantara) [RHEL-190706]
- ksmbd: add per-handle permission check to FILE_LINK_INFORMATION (Paulo Alcantara) [RHEL-190706]
- ksmbd: add a permission check for FSCTL_SET_ZERO_DATA (Paulo Alcantara) [RHEL-190706]
- ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL (Paulo Alcantara) [RHEL-190706]
- smb: server: remove code guarded by nonexistent config option (Paulo Alcantara) [RHEL-190706]
- smb/server: fix incorrect file size in get_file_compression_info() (Paulo Alcantara) [RHEL-190706]
- smb/server: get compression format in get_file_compression_info() (Paulo Alcantara) [RHEL-190706]
- smb/server: implement FSCTL_SET_COMPRESSION ioctl handler (Paulo Alcantara) [RHEL-190706]
- smb/server: implement FSCTL_GET_COMPRESSION ioctl handler (Paulo Alcantara) [RHEL-190706]
- smb/server: get compression file attribute on open (Paulo Alcantara) [RHEL-190706]
- smb: move compression definitions into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- smb: remove duplicate server/smbfsctl.h (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in same_client_has_lease() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl() (Paulo Alcantara) [RHEL-190706]
- smb: client: Use more common code in SMB2_tcon() (Paulo Alcantara) [RHEL-190706]
- smb: client: Use more common error handling code in smb3_reconfigure() (Paulo Alcantara) [RHEL-190706]
- smb/client: Fix error code in smb2_aead_req_alloc() (Paulo Alcantara) [RHEL-190706]
- smb/client: clean up a type issue in cifs_xattr_get() (Paulo Alcantara) [RHEL-190706]
- smb/client: allow FS_IOC_SETFLAGS to clear compression (Paulo Alcantara) [RHEL-190706]
- smb/client: use writable handle for FS_IOC_SETFLAGS compression (Paulo Alcantara) [RHEL-190706]
- smb/client: always return a value for FS_IOC_GETFLAGS (Paulo Alcantara) [RHEL-190706]
- smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-190706]
- smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-190706]
- cifs: validate full SID length in security descriptors (Paulo Alcantara) [RHEL-190706]
- smb: client: resolve SWN tcon from live registrations (Paulo Alcantara) [RHEL-190706]
- cifs: remove all cifs files before kill super (Paulo Alcantara) [RHEL-190706]
- smb: client: fix conflicting option validation for new mount API (Paulo Alcantara) [RHEL-190706]
- cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-190706]
- smb: client: convert cifs_smb3_do_mount() to sget_fc() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix NULL-deref of opinfo-&amp;gt;conn in oplock/lease break notifiers (Paulo Alcantara) [RHEL-190706]
- smb: client: fix uninitialized variable in smb2_writev_callback (Paulo Alcantara) [RHEL-190706]
- smb: client: detect short folioq copy in cifs_copy_folioq_to_iter() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE (Paulo Alcantara) [RHEL-190706]
- ksmbd: release ksmbd_inode ref via ksmbd_inode_put on lookup paths (Paulo Alcantara) [RHEL-190706]
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops (Paulo Alcantara) [RHEL-190706]
- smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate SID in parent security descriptor during ACL inheritance (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable reconnect error path file lifetime (Paulo Alcantara) [RHEL-190706]
- smb: client: change allocation requirements in DUP_CTX_STR macro (Paulo Alcantara) [RHEL-190706]
- smb: client: require net admin for CIFS SWN netlink (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: divide, not multiply, milliseconds by 1000 (Paulo Alcantara) [RHEL-190706]
- cifs: Fix busy dentry used after unmounting (Paulo Alcantara) [RHEL-190706]
- smb: client: use data_len for SMB2 READ encrypted folioq copy (Paulo Alcantara) [RHEL-190706]
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Paulo Alcantara) [RHEL-190706]
- cifs: Fix undefined variables (Paulo Alcantara) [RHEL-190706]
- smbdirect: Fix error cleanup in smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
- smb: client: avoid integer overflow in SMB2 READ length check (Paulo Alcantara) [RHEL-190706]
- cifs: client: stage smb3_reconfigure() updates and restore ctx on failure (Paulo Alcantara) [RHEL-190706]
- smb/client: fix possible infinite loop and oob read in symlink_data() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix null pointer dereference in compare_guid_key() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix null pointer dereference in proc_show_files() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow (Paulo Alcantara) [RHEL-190706]
- SMB3.1.1: add missing QUERY_DIR info levels (Paulo Alcantara) [RHEL-190706]
- netfs, afs: Fix write skipping in dir/link writepages (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_read_folio() to wait on writeback (Paulo Alcantara) [RHEL-190706]
- netfs: Fix folio-&amp;gt;private handling in netfs_perform_write() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix partial invalidation of streaming-write folio (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix leak of request in netfs_write_begin() error handling (Paulo Alcantara) [RHEL-190706]
- netfs: Fix early put of sink folio in netfs_read_gaps() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix write streaming disablement if fd open O_RDWR (Paulo Alcantara) [RHEL-190706]
- netfs: Fix read-gaps to remove netfs_folio from filled folio (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential deadlock in write-through mode (Paulo Alcantara) [RHEL-190706]
- netfs: Fix streaming write being overwritten (Paulo Alcantara) [RHEL-190706]
- netfs: Defer the emission of trace_netfs_folio() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (Paulo Alcantara) [RHEL-190706]
- netfs: Fix overrun check in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
- netfs: fix error handling in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential uninitialised var in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
- netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call (Paulo Alcantara) [RHEL-190706]
- netfs: Fix zeropoint update where i_size &amp;gt; remote_i_size (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential for tearing in -&amp;gt;remote_i_size and -&amp;gt;zero_point (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_read_to_pagecache() to pause on subreq failure (Paulo Alcantara) [RHEL-190706]
- netfs: Fix missing barriers when accessing stream-&amp;gt;subrequests locklessly (Paulo Alcantara) [RHEL-190706]
- netfs: Fix missing locking around retry adding new subreqs (Paulo Alcantara) [RHEL-190706]
- netfs: Fix cancellation of a DIO and single read subrequests (Paulo Alcantara) [RHEL-190706]
- smb/client: fix out-of-bounds read in symlink_data() (Paulo Alcantara) [RHEL-190706]
- smb: client: Zero-pad short GSS session keys per MS-SMB2 (Paulo Alcantara) [RHEL-190706]
- smb: client: Use FullSessionKey for AES-256 encryption key derivation (Paulo Alcantara) [RHEL-190706]
- cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate inherited ACE SID length (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix kernel-doc warnings from ksmbd_conn_get/put() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fail share config requests when path allocation fails (Paulo Alcantara) [RHEL-190706]
- ksmbd: close durable scavenger races against m_fp_list lookups (Paulo Alcantara) [RHEL-190706]
- ksmbd: harden file lifetime during session teardown (Paulo Alcantara) [RHEL-190706]
- ksmbd: centralize ksmbd_conn final release to plug transport leak (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: fix MR registration for coalesced SG lists (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce and use include/linux/smbdirect.h (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: make use of DEFAULT_SYMBOL_NAMESPACE and EXPORT_SYMBOL_GPL (Paulo Alcantara) [RHEL-190706]
- cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-190706]
- smb: client: change allocation requirements in smb2_compound_op (Paulo Alcantara) [RHEL-190706]
- ksmbd: rewrite stop_sessions() with restartable iteration (Paulo Alcantara) [RHEL-190706]
- smb: server: handle readdir_info_level_struct_sz() error (Paulo Alcantara) [RHEL-190706]
- smb/client: remove unused smb3_parse_opt() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: move fs/smb/common/smbdirect/ to fs/smb/smbdirect/ (Paulo Alcantara) [RHEL-190706]
- smb: common: add SMB3_COMPRESS_MAX_ALGS (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: add code docs to lz77.c (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: LZ77 optimizations (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: increase LZ77_MATCH_MAX_DIST (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: fix counting in LZ77 match finding (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: fix buffer overrun in lz77_compress() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix (remove) drop_dir_cache module parameter (Paulo Alcantara) [RHEL-190706]
- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Paulo Alcantara) [RHEL-190706]
- smb: server: stop sending fake security descriptors (Paulo Alcantara) [RHEL-190706]
- ksmbd: scope conn-&amp;gt;binding slowpath to bound sessions only (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix CreateOptions sanitization clobbering the whole field (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix O(N^2) DoS in smb2_lock via unbounded LockCount (Paulo Alcantara) [RHEL-190706]
- ksmbd: destroy async_ida in ksmbd_conn_free() (Paulo Alcantara) [RHEL-190706]
- ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() (Paulo Alcantara) [RHEL-190706]
- MAINTAINERS: create entry for smbdirect (Paulo Alcantara) [RHEL-190706]
- ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() (Paulo Alcantara) [RHEL-190706]
- cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: fix bad encoding on last LZ77 flag (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment (Paulo Alcantara) [RHEL-190706]
- ksmbd: use check_add_overflow() to prevent u16 DACL size overflow (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in smb2_open during durable reconnect (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() (Paulo Alcantara) [RHEL-190706]
- smb: server: fix max_connections off-by-one in tcp accept path (Paulo Alcantara) [RHEL-190706]
- ksmbd: require minimum ACE size in smb_check_perm_dacl() (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate response sizes in ipc_validate_msg() (Paulo Alcantara) [RHEL-190706]
- smb: server: fix active_num_conn leak on transport allocation failure (Paulo Alcantara) [RHEL-190706]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_connection_deregister_mr_io unlock while waiting (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: fix the logic in smbdirect_socket_destroy_sync() without an error (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: fix copyright header of smbdirect.h (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: change smbdirect_socket_parameters.{initiator_depth,responder_resources} to __u16 (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: remove unused SMBDIRECT_USE_INLINE_C_FILES logic (Paulo Alcantara) [RHEL-190706]
- smb: server: no longer use smbdirect_socket_set_custom_workqueue() (Paulo Alcantara) [RHEL-190706]
- smb: client: no longer use smbdirect_socket_set_custom_workqueue() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce global workqueues (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: prepare use of dedicated workqueues for different steps (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: remove unused smbdirect_connection_mr_io_recovery_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: wrap rdma_disconnect() in rdma_[un]lock_handler() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_netdev_rdma_capable_mode_type() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_netdev_rdma_capable_mode_type() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect.ko (Paulo Alcantara) [RHEL-190706]
- smb: server: remove unused ksmbd_transport_ops.prepare() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_{listen,accept}() (Paulo Alcantara) [RHEL-190706]
- smb: server: only use public smbdirect functions (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_create_accepting()/smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_{socket_init_accepting,connection_wait_for_connected}() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_send_iter() and related functions (Paulo Alcantara) [RHEL-190706]
- smb: server: let smb_direct_post_send_data() return data_length (Paulo Alcantara) [RHEL-190706]
- smb: server: split out smb_direct_send_iter() out of smb_direct_writev() (Paulo Alcantara) [RHEL-190706]
- smb: server: let smbdirect_map_sges_from_iter() truncate the message boundary (Paulo Alcantara) [RHEL-190706]
- smb: server: inline smb_direct_create_header() into smb_direct_post_send_data() (Paulo Alcantara) [RHEL-190706]
- smb: server: move iov_iter_kvec() out of smb_direct_post_send_data() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_destroy_sync() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of functions from smbdirect_rw.c (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_wait_for_credits() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_get_buf_page_count() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_recv_io_refill[_work]() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_schedule_cleanup() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect.ko (Paulo Alcantara) [RHEL-190706]
- smb: client: only use public smbdirect functions (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_create_kern()/smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_init_new() and smbdirect_connect_sync() (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce and use smbd_debug_proc_show() (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce and use smbd_mr_fill_buffer_descriptor() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_send_{single_iter,immediate_work}() (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send_full_iter() get remaining_length and return data_length (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send_iter() get remaining_length and return data_length (Paulo Alcantara) [RHEL-190706]
- smb: client: change smbd_post_send_empty() to void return (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_destroy_sync() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of functions from smbdirect_mr.c (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_recv_io_refill_work() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: initialize recv_io-&amp;gt;cqe.done = recv_done just once (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_schedule_cleanup() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce the basic smbdirect.ko (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_{listen,accept}() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_bind() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: split out smbdirect_accept_negotiate_finish() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_init_send_batch_storage() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: provide explicit prototypes for cross .c file functions (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_public.h with prototypes (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_internal.h define pr_fmt without SMBDIRECT_USE_INLINE_C_FILES (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_socket.h include all headers for used structures (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_create_{kern,accepting}() and smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_accept_connect_request() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connect[_sync]() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_socket_set_initial_parameters() call rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_init_{new,accepting}() and helpers (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_shutdown() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_is_connected() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_wait_for_connected() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_legacy_debug_proc_show() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_mr_io_fill_buffer_descriptor() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_negotiation_done() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_send_immediate_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_send_iter() and related functions (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_rdma_{established,event_handler}() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_destroy[_sync]() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_recv_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: define SMBDIRECT_RDMA_CM_[RNR_]RETRY (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: define SMBDIRECT_MIN_{RECEIVE,FRAGMENTED}_SIZE (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_rw.c with server rw code (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_mr.c with client mr code (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_wait_for_credits() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_get_buf_page_count() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: split out smbdirect_connection_recv_io_refill() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_recv_io_refill_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_map_sges_from_iter() and helper functions (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.{send,recv}_io.mem.gfp_mask (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: set SMBDIRECT_KEEPALIVE_NONE before disable_delayed_work(&amp;amp;sc-&amp;gt;idle.timer_work); (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection.c to be filled (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_schedule_cleanup[{_lvl,_status}]() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.c to be filled (Paulo Alcantara) [RHEL-190706]
- smb: server: include smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
- smb: client: include smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_internal.h (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
- smb: client: fix integer underflow in receive_encrypted_read() (Paulo Alcantara) [RHEL-190706]
- smb: client: add tracepoints for deferred handle caching (Paulo Alcantara) [RHEL-190706]
- smb: client: add oplock level to smb3_open_done tracepoint (Paulo Alcantara) [RHEL-190706]
- smb: client: add tracepoint for local lock conflicts (Paulo Alcantara) [RHEL-190706]
- smb: client: add tracepoints for lock operations (Paulo Alcantara) [RHEL-190706]
- smb: client: allow both 'lease' and 'nolease' mount options (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: add some logging to SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.logging infrastructure (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect.h include #include &amp;lt;linux/types.h&amp;gt; (Paulo Alcantara) [RHEL-190706]
- smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-190706]
- smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc (Paulo Alcantara) [RHEL-190706]
- ksmbd: require 3 sub-authorities before reading sub_auth[2] (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate EaNameLength in smb2_get_ea() (Paulo Alcantara) [RHEL-190706]
- ksmbd: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate owner of durable handle on reconnect (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger (Paulo Alcantara) [RHEL-190706]
- ksmbd: ipc: use kzalloc_flex and __counted_by (Paulo Alcantara) [RHEL-190706]
- smb: move filesystem_vol_info into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- smb: move file_basic_info into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- smb: move some definitions from common/smb2pdu.h into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- vfs: get rid of BUG_ON() in d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-190706]
- smb: client: get rid of d_drop()+d_add() (Paulo Alcantara) [RHEL-190706]
- smb: client: set ATTR_TEMPORARY with O_TMPFILE | O_EXCL (Paulo Alcantara) [RHEL-190706]
- smb: client: add support for O_TMPFILE (Paulo Alcantara) [RHEL-190706]
- vfs: introduce d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-190706]
- smb: client: add missing MODULE_DESCRIPTION() to smb1maperror_test (Paulo Alcantara) [RHEL-190706]
- smb: client: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-190706]
- smb/client: move smb2maperror declarations to smb2proto.h (Paulo Alcantara) [RHEL-190706]
- smb/client: introduce KUnit tests to check DOS/SRV err mapping search (Paulo Alcantara) [RHEL-190706]
- smb/client: check if SMB1 DOS/SRV error mapping arrays are sorted (Paulo Alcantara) [RHEL-190706]
- smb/client: use binary search for SMB1 DOS/SRV error mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: autogenerate SMB1 DOS/SRV to POSIX error mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: annotate smberr.h with POSIX error codes (Paulo Alcantara) [RHEL-190706]
- smb/client: move ERRnetlogonNotStarted to DOS error class (Paulo Alcantara) [RHEL-190706]
- smb/client: introduce KUnit test to check ntstatus_to_dos_map search (Paulo Alcantara) [RHEL-190706]
- smb/client: check if ntstatus_to_dos_map is sorted (Paulo Alcantara) [RHEL-190706]
- smb/client: use binary search for NT status to DOS mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: refactor ntstatus_to_dos() to return mapping entry (Paulo Alcantara) [RHEL-190706]
- smb/client: replace nt_errs with ntstatus_to_dos_map (Paulo Alcantara) [RHEL-190706]
- smb/client: autogenerate SMB1 NT status to DOS error mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: annotate nterr.h with DOS error codes (Paulo Alcantara) [RHEL-190706]
- smb/client: avoid null-ptr-deref when tests fail in test_cmp_map() (Paulo Alcantara) [RHEL-190706]
- fs/smb/client: add verbose error logging for UNC parsing (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix OOB write in QUERY_INFO for compound requests (Paulo Alcantara) [RHEL-190706]
- netfs: Fix the handling of stream-&amp;gt;front by removing it (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix potencial OOB in get_file_all_info() for compound requests (Paulo Alcantara) [RHEL-190706]
- smb/client: ensure smb2_mapping_table rebuild on cmd changes (Paulo Alcantara) [RHEL-190706]
- ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix memory leaks and NULL deref in smb2_lock() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() (Paulo Alcantara) [RHEL-190706]
- ksmbd: do not expire session on binding failure (Paulo Alcantara) [RHEL-190706]
- smb: client: fix generic/694 due to wrong -&amp;gt;i_blocks (Paulo Alcantara) [RHEL-190706]
- netfs: Fix read abandonment during retry (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in durable v2 replay of active file handles (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of share_conf in compound request (Paulo Alcantara) [RHEL-190706]
- ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION (Paulo Alcantara) [RHEL-190706]
- ksmbd: unset conn-&amp;gt;binding on failed binding request (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix share_conf UAF in tree_conn disconnect (Paulo Alcantara) [RHEL-190706]
- cifs: smb1: fix comment typo (Paulo Alcantara) [RHEL-190706]
- smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix iface port assignment in parse_server_interfaces (Paulo Alcantara) [RHEL-190706]
- smb/client: only export symbol for 'smb2maperror-test' module (Paulo Alcantara) [RHEL-190706]
- smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-190706]
- smb: client: fix atomic open with O_DIRECT &amp;amp; O_SYNC (Paulo Alcantara) [RHEL-190706]
- netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry (Paulo Alcantara) [RHEL-190706]
- netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (Paulo Alcantara) [RHEL-190706]
- ksmbd: Don't log keys in SMB3 signing and encryption key generation (Paulo Alcantara) [RHEL-190706]
- smb: server: fix use-after-free in smb2_open() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free by using call_rcu() for oplock_info (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in proc_show_files due to early rcu_read_unlock (Paulo Alcantara) [RHEL-190706]
- smb/server: Fix another refcount leak in smb2_open() (Paulo Alcantara) [RHEL-190706]
- cifs: open files should not hold ref on superblock (Paulo Alcantara) [RHEL-190706]
- smb: update some doc references (Paulo Alcantara) [RHEL-190706]
- smb/client: make SMB2 maperror KUnit tests a separate module (Paulo Alcantara) [RHEL-190706]
- smb: client: Use snprintf in cifs_set_cifscreds (Paulo Alcantara) [RHEL-190706]
- smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Paulo Alcantara) [RHEL-190706]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-190706]
- netfs: Fix unbuffered/DIO writes to dispatch subrequests in strict sequence (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix signededness bug in smb_direct_prepare_negotiation() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix cifs_pick_channel when channels are equally loaded (Paulo Alcantara) [RHEL-190706]
- Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [cifs] (Paulo Alcantara) [RHEL-190706]
- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [cifs] (Paulo Alcantara) [RHEL-190706]
- Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [cifs] (Paulo Alcantara) [RHEL-190706]
- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [cifs] (Paulo Alcantara) [RHEL-190706]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [cifs] (Paulo Alcantara) [RHEL-190706]
- smb: client: terminate session upon failed client required signing (Paulo Alcantara) [RHEL-190706]
- smb: server: Remove duplicate include of misc.h (Paulo Alcantara) [RHEL-190706]
- cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
- smb/client: move NT_STATUS_MORE_ENTRIES (Paulo Alcantara) [RHEL-190706]
- smb/client: rename to NT_ERROR_INVALID_DATATYPE (Paulo Alcantara) [RHEL-190706]
- smb/client: rename to NT_STATUS_SOME_NOT_MAPPED (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_PRIVILEGE_NOT_HELD (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_MORE_PROCESSING_REQUIRED (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_BUFFER_OVERFLOW (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_NOTIFY_ENUM_DIR (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Remove duplicate include of cifs_debug.h (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix non-IPv6 build (Paulo Alcantara) [RHEL-190706]
- smb client: Add generated file to gitignore file (Paulo Alcantara) [RHEL-190706]
- ksmbd: convert tree_conns_lock to rw_semaphore (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix missing chann_lock while iterating session channel list (Paulo Alcantara) [RHEL-190706]
- ksmbd: add chann_lock to protect ksmbd_chann_list xarray (Paulo Alcantara) [RHEL-190706]
- cifs: Fix the copyright banner on smb1maperror.c (Paulo Alcantara) [RHEL-190706]
- smb: common: add header guards to fs/smb/common/smb2status.h (Paulo Alcantara) [RHEL-190706]
- smb: client: Avoid a dozen -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-190706]
- smb/client: remove useless comment in mapping_table_ERRSRV (Paulo Alcantara) [RHEL-190706]
- smb/client: remove some literal NT error codes from ntstatus_to_dos_map (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_VOLUME_NOT_UPGRADED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_NO_USER_KEYS (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_WRONG_EFS (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_NO_EFS (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_NO_RECOVERY_POLICY (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_RANGE_NOT_FOUND (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_DECRYPTION_FAILED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_ENCRYPTION_FAILED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_DIRECTORY_IS_A_REPARSE_POINT (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_VOLUME_DISMOUNTED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_VARIABLE_NOT_FOUND (Paulo Alcantara) [RHEL-190706]
- smb/client: rename ERRinvlevel to ERRunknownlevel (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_OS2_INVALID_LEVEL (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_INVALID_INFO_CLASS to ERRbadpipe (Paulo Alcantara) [RHEL-190706]
- smb/client: introduce KUnit test to check search result of smb2_error_map_table (Paulo Alcantara) [RHEL-190706]
- smb/client: use bsearch() to find target in smb2_error_map_table (Paulo Alcantara) [RHEL-190706]
- smb/client: check whether smb2_error_map_table is sorted in ascending order (Paulo Alcantara) [RHEL-190706]
- cifs: Autogenerate SMB2 error mapping table (Paulo Alcantara) [RHEL-190706]
- smb: server: correct value for smb_direct_max_fragmented_recv_size (Paulo Alcantara) [RHEL-190706]
- smb: client: correct value for smbd_max_fragmented_recv_size (Paulo Alcantara) [RHEL-190706]
- smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() (Paulo Alcantara) [RHEL-190706]
- ksmbd: add procfs interface for runtime monitoring and statistics (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
- smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-190706]
- smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-190706]
- smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-190706]
- smb: client: remove pointless sc-&amp;gt;send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-190706]
- smb: client: remove pointless sc-&amp;gt;recv_io.credits.count rollback (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send() make use of request-&amp;gt;wr (Paulo Alcantara) [RHEL-190706]
- smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
- smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-190706]
- smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-190706]
- smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
- cifs: Label SMB2 statuses with errors (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Make BCC accessors conditional (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: connect.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: sess.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: cifsencrypt.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: netmisc.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: misc.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: cifs_debug.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move inline funcs (Paulo Alcantara) [RHEL-190706]
- cifs: Fix cifs_dump_mids() to call -&amp;gt;dump_detail (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Don't return smb_hdr from cifs_{,small_}buf_get() (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move BCC access functions (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Adjust #includes (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Split SMB1 protocol defs into smb1pdu.h (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Add some #includes (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move some SMB1 received PDU checking bits to smb1transport.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move some SMB1 receive bits to smb1transport.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Create smb1proto.h for SMB1 declarations (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Rename cifstransport.c (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/ntlmssp.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/reparse.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/smb2proto.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_debug.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_swn.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/compress.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_spnego.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/fs_context.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/dns_resolve.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/dfs_cache.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/netlink.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_unicode.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/dfs.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cached_dir.h (Paulo Alcantara) [RHEL-190706]
- smb: client: add multichannel async work for CONFIG_CIFS_DFS_UPCALL=n (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce multichannel async work during mount (Paulo Alcantara) [RHEL-190706]
- smb: server: reset smb_direct_port = SMB_DIRECT_PORT_INFINIBAND on init (Paulo Alcantara) [RHEL-190706]
- ksmbd: smbd: fix dma_unmap_sg() nents (Paulo Alcantara) [RHEL-190706]
- nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks (Maurizio Lombardi) [RHEL-194153]
- tls: Preserve sk_err across recvmsg() when data has been copied (Sabrina Dubroca) [RHEL-152729]
- net: tls: prevent chain-after-chain in plain text SG (Sabrina Dubroca) [RHEL-152729]
- net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Sabrina Dubroca) [RHEL-152729]
- net: tls: fix silent data drop under pipe back-pressure (Sabrina Dubroca) [RHEL-152729]
- net: tls: fix strparser anchor skb leak on offload RX setup failure (Sabrina Dubroca) [RHEL-152729]
- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Sabrina Dubroca) [RHEL-152729]
- tls: Purge async_hold in tls_decrypt_async_wait() (Sabrina Dubroca) [RHEL-152729]
- tls: Fix race condition in tls_sw_cancel_work_tx() (Sabrina Dubroca) [RHEL-154841] {CVE-2026-23240}
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Sabrina Dubroca) [RHEL-189560] {CVE-2025-40149}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189578] {CVE-2025-71113}
- e1000e: limit endianness conversion to boundary words (Michal Schmidt) [RHEL-186602]
- e1000: limit endianness conversion to boundary words (Michal Schmidt) [RHEL-186602]
- e1000e: Use __napi_schedule_irqoff() (Michal Schmidt) [RHEL-186602]
- e1000e: use ktime_get_real_ns() in e1000e_systim_reset() (Michal Schmidt) [RHEL-186602]
- net: Consistently define pci_device_ids using named initializers [e1000e] (Michal Schmidt) [RHEL-186602]
- e1000e: Unroll PTP in probe error handling (Michal Schmidt) [RHEL-186602]
- e1000: check return value of e1000_read_eeprom (Michal Schmidt) [RHEL-186602]
- e1000/e1000e: Fix leak in DMA error cleanup (Michal Schmidt) [RHEL-186602]
- e1000e: clear DPG_EN after reset to avoid autonomous power-gating (Michal Schmidt) [RHEL-186602]
- e1000e: introduce new board type for Panther Lake PCH (Michal Schmidt) [RHEL-186602]
- Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
- e1000e: Switch to use %ptSp (Michal Schmidt) [RHEL-186602]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186335]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186335]
- net: wwan: t7xx: Add delay between MD and SAP suspend (Jose Ignacio Tornos Martinez) [RHEL-155042]
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180156] {CVE-2026-46117}
- dt-bindings: input: add debounce-delay-ms common property (Tony Camuso) [RHEL-176366]
- dt-bindings: Update Sasha Finkelstein's email address (Tony Camuso) [RHEL-176366]
- MIPS/input: Move RB532 button to GPIO descriptors (Tony Camuso) [RHEL-176366]
- Input: uinput - take event lock when submitting FF request "event" (Tony Camuso) [RHEL-176366]
- Input: uinput - fix circular locking dependency with ff-core (Tony Camuso) [RHEL-176366]
- Input: aiptek - validate raw macro indices before updating state (Tony Camuso) [RHEL-176366]
- Input: synaptics_usb - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
- Input: appletouch - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
- Input: keyspan-remote - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
- Input: aiptek - use HID headers (Tony Camuso) [RHEL-176366]
- Input: wm97xx - use guard notation when acquiring mutex (Tony Camuso) [RHEL-176366]
- Input: mk712 - use guard notation when acquiring spinlock (Tony Camuso) [RHEL-176366]
- Input: elo - use guard notation when acquiring mutex (Tony Camuso) [RHEL-176366]
- dt-bindings: input: matrix-keymap: fix key board wording (Tony Camuso) [RHEL-176366]
- Input: atlas - check ACPI_COMPANION() against NULL (Tony Camuso) [RHEL-176366]
- Input: atlas - convert ACPI driver to a platform one (Tony Camuso) [RHEL-176366]
- input: trackpoint - Enable doubletap by default on capable devices (Tony Camuso) [RHEL-176366]
- Input: psmouse - remove dedicated kpsmoused workqueue (Tony Camuso) [RHEL-176366]
- Input: alps - use standard workqueue when registering supplemental device (Tony Camuso) [RHEL-176366]
- Input: psmouse - replace flush_workqueue() with disable_delayed_work_sync() (Tony Camuso) [RHEL-176366]
- Input: atkbd - fix various formatting issues (Tony Camuso) [RHEL-176366]
- Input: atkbd - switch to using explicitly sized types (Tony Camuso) [RHEL-176366]
- Input: atkbd - use dev_warn_ratelimited() (Tony Camuso) [RHEL-176366]
- Input: atkbd - use __free() cleanup facility in when parsing FW keymap (Tony Camuso) [RHEL-176366]
- Input: atkbd - validate scancode in firmware keymap entries (Tony Camuso) [RHEL-176366]
- dt-bindings: input: Add Parade TC3408 touchscreen controller (Tony Camuso) [RHEL-176366]
- Input: export input_default_setkeycode (Tony Camuso) [RHEL-176366]
- Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table (Tony Camuso) [RHEL-176366]
- Input: bcm5974 - recover from failed mode switch (Tony Camuso) [RHEL-176366]
- Input: libps2 - embed WARN_ON(1) macros into their enclosing if statements (Tony Camuso) [RHEL-176366]
- dt-bindings: input: qcom,pm8941-pwrkey: Document PMM8654AU (Tony Camuso) [RHEL-176366]
- dt-bindings: input: touchscreen: imagis: allow linux,keycodes for ist3038 (Tony Camuso) [RHEL-176366]
- dt-bindings: Fix emails with spaces or missing brackets (Tony Camuso) [RHEL-176366]
- docs: fix 're-use' -&amp;gt; 'reuse' in documentation (Tony Camuso) [RHEL-176366]
- Input: gpio_keys - fall back to platform_get_irq() for interrupt-only keys (Tony Camuso) [RHEL-176366]
- Input: i8042 - add quirks for MECHREVO Wujie 15X Pro (Tony Camuso) [RHEL-176366]
- Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA (Tony Camuso) [RHEL-176366]
- Documentation: use a source-read extension for the index link boilerplate (Tony Camuso) [RHEL-176366]
- Input: appletouch - fix potential race between resume and open (Tony Camuso) [RHEL-176366]
- dt-bindings: input: i2c-hid: Introduce FocalTech FT8112 (Tony Camuso) [RHEL-176366]
- Input: synaptics_i2c - switch to using managed resources (Tony Camuso) [RHEL-176366]
- Input: synaptics_i2c - guard polling restart in resume (Tony Camuso) [RHEL-176366]
- kernel.h: drop hex.h and update all hex.h users (Tony Camuso) [RHEL-176366]
- Input: serio - complete sizeof(*pointer) conversions (Tony Camuso) [RHEL-176366]
- Input: elo - switch to use scnprintf() to suppress truncation warning (Tony Camuso) [RHEL-176366]
- Input: adp5589 - remove a leftover header file (Tony Camuso) [RHEL-176366]
- doc: input: fix typos in input.rst (Tony Camuso) [RHEL-176366]
- Input: add ABS_SND_PROFILE (Tony Camuso) [RHEL-176366]
- Input: psmouse-smbus - add WQ_UNBOUND to alloc_workqueue user (Tony Camuso) [RHEL-176366]
- Input: synaptics_i2c - replace use of system_wq with system_dfl_wq (Tony Camuso) [RHEL-176366]
- Input: gpio_keys - replace use of system_wq with system_dfl_wq (Tony Camuso) [RHEL-176366]
- Input: alps - fix use-after-free bugs caused by dev3_register_work (Tony Camuso) [RHEL-176366]
- dt-bindings: Updates Linus Walleij's mail address (Tony Camuso) [RHEL-176366]
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table (Tony Camuso) [RHEL-176366]
- Input: atkbd - skip deactivate for HONOR FMB-P's internal keyboard (Tony Camuso) [RHEL-176366]
- Input: cyapa - remove redundant pm_runtime_mark_last_busy() calls (Tony Camuso) [RHEL-176366]
- Input: byd - use %*ph for Z packet dump (Tony Camuso) [RHEL-176366]
- dt-bindings: Remove extra blank lines (Tony Camuso) [RHEL-176366]
- dt-bindings: Update Krzysztof Kozlowski's email (Tony Camuso) [RHEL-176366]
- dt-bindings: touchscreen: consolidate simple touch controller to trivial-touch.yaml (Tony Camuso) [RHEL-176366]
- Input: MT - add INPUT_MT_TOTAL_FORCE flags (Tony Camuso) [RHEL-176366]
- Input: rename INPUT_PROP_HAPTIC_TOUCHPAD to INPUT_PROP_PRESSUREPAD (Tony Camuso) [RHEL-176366]
- Input: add INPUT_PROP_HAPTIC_TOUCHPAD (Tony Camuso) [RHEL-176366]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libperf-6.12.0-257.el10.aarch64</title>
      <pubDate>Thu, 06 Aug 2026 12:12:38 PM GMT</pubDate>
      <guid isPermaLink="false">63995a0ef25f433b2fb640a02ec9f9a8ccafe8a5c1f9954844a7f1da7ff9d69d</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libperf-6.12.0-257.el10.aarch64.rpm</link>
      <description><p><strong>libperf</strong> - The perf library from kernel source&lt;br /&gt;</p>

<p>This package contains the kernel source perf library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 06 Aug 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-257.el10]
- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562]
- wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079]
- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634]
- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358]
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430]
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345]
- PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011]
- PCI: Align head space better (Myron Stowe) [RHEL-178011]
- PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011]
- parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011]
- MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
- resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011]
- resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011]
- resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011]
- PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011]
- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011]
- resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011]
- resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011]
- kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011]
- resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011]
- resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011]
- resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011]
- resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011]
- selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873]
- dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873]
- tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873]
- tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873]
- tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873]
- tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873]
- net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873]
- net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873]
- selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873]
- selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873]
- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625]

Wed, 05 Aug 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-256.el10]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996]
- kselftest/arm64: Handle attempts to disable SM on SME only systems (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Test SME on SME only systems in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- arm64: mm: Cast start/end markers to char *, not u64 (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Cover disabling streaming mode without SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Don't open code SVE_PT_SIZE() in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Fix SVE write data generation for SME only systems (Steve Dunnagan) [RHEL-158921]
- kselftest/arm64: Test FPSIMD format data writes via NT_ARM_SVE in fp-ptrace (Steve Dunnagan) [RHEL-158921]
- kselftst/arm64: Test NT_ARM_SVE FPSIMD format writes on non-SVE systems (Steve Dunnagan) [RHEL-158921]
- arm64/sysreg: Replace TCR_EL1 field macros (Steve Dunnagan) [RHEL-158921]
- arm64: mm: Represent physical memory with phys_addr_t and resource_size_t (Steve Dunnagan) [RHEL-158921]
- arm64: mm: Make map_fdt() return mapped pointer (Steve Dunnagan) [RHEL-158921]
- arm64/fpsimd: signal: Fix restoration of SVE context (Steve Dunnagan) [RHEL-158921]
- arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (Steve Dunnagan) [RHEL-158921]
- arm64/fpsimd: ptrace: Fix SVE writes on !SME systems (Steve Dunnagan) [RHEL-158921]
- arm64: Fix cleared E0POE bit after cpu_suspend()/resume() (Steve Dunnagan) [RHEL-158921]
- arm64/gcs: Flush the GCS locking state on exec (Steve Dunnagan) [RHEL-158921]
- arm64/sysreg: Remove unused define ARM64_FEATURE_FIELD_BITS (Steve Dunnagan) [RHEL-158921]
- arm64/sme: Support disabling streaming mode via ptrace on SME only systems (Steve Dunnagan) [RHEL-158921]
- arm64: Fix typos and spelling errors in comments (Steve Dunnagan) [RHEL-158921]
- arm64: Fix double word in comments (Steve Dunnagan) [RHEL-158921]
- arm64: atomics: lse: Remove unused parameters from ATOMIC_FETCH_OP_AND macros (Steve Dunnagan) [RHEL-158921]
- arm64: remove duplicate ARCH_HAS_MEM_ENCRYPT (Steve Dunnagan) [RHEL-158921]
- arm64: add unlikely hint to MTE async fault check in el0_svc_common (Steve Dunnagan) [RHEL-158921]
- arm64: acpi: add newline to deferred APEI warning (Steve Dunnagan) [RHEL-158921]
- arm64/mm: Ensure PGD_SIZE is aligned to 64 bytes when PA_BITS = 52 (Steve Dunnagan) [RHEL-158921]
- arm64/mm: Drop cpu_set_[default|idmap]_tcr_t0sz() (Steve Dunnagan) [RHEL-158921]
- arm64: remove unused ARCH_PFN_OFFSET (Steve Dunnagan) [RHEL-158921]
- arm64: use SOFTIRQ_ON_OWN_STACK for enabling softirq stack (Steve Dunnagan) [RHEL-158921]
- arm64: Remove assertion on CONFIG_VMAP_STACK (Steve Dunnagan) [RHEL-158921]
- uaccess: Provide ASM GOTO safe wrappers for unsafe_*_user() (Steve Dunnagan) [RHEL-158921]
- arm64: uaccess: Use unsafe wrappers for ASM GOTO (Steve Dunnagan) [RHEL-158921]
- igc: fix typos in comments (Michal Schmidt) [RHEL-186597]
- igc: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-186597]
- igc: skip RX timestamp header for frame preemption verification (Michal Schmidt) [RHEL-186597]
- igc: fix potential skb leak in igc_fpe_xmit_smd_frame() (Michal Schmidt) [RHEL-186597]
- igc: set tx buffer type for SMD frames (Michal Schmidt) [RHEL-186597]
- net: Consistently define pci_device_ids using named initializers [igc] (Michal Schmidt) [RHEL-186597]
- igc: fix page fault in XDP TX timestamps handling (Michal Schmidt) [RHEL-186597]
- igc: fix missing update of skb-&amp;gt;tail in igc_xmit_frame() (Michal Schmidt) [RHEL-186597]
- igc: Fix trigger of incorrect irq in igc_xsk_wakeup function (Michal Schmidt) [RHEL-186597]
- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [igc] (Michal Schmidt) [RHEL-186597]
- Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igc] (Michal Schmidt) [RHEL-186597]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igc] (Michal Schmidt) [RHEL-186597]
- igb: fix typos in comments (Michal Schmidt) [RHEL-177449]
- igb: use napi_schedule_irqoff() instead of napi_schedule() (Michal Schmidt) [RHEL-177449]
- igb: use ktime_get_real helpers in igb_ptp_reset() (Michal Schmidt) [RHEL-177449]
- net: Consistently define pci_device_ids using named initializers [igb,igbvf] (Michal Schmidt) [RHEL-177449]
- igb: remove napi_synchronize() in igb_down() (Michal Schmidt) [RHEL-177449]
- igb: Fix trigger of incorrect irq in igb_xsk_wakeup (Michal Schmidt) [RHEL-177449]
- Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [igb] (Michal Schmidt) [RHEL-177449]
- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [igb,igbvf] (Michal Schmidt) [RHEL-177449]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [igb,igbvf] (Michal Schmidt) [RHEL-177449]
- igb: Switch to use %ptSp (Michal Schmidt) [RHEL-177449]
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175863] {CVE-2024-53143}
- scsi: mpt3sas: Limit NVMe request size to 2 MiB (Chandrakanth Patil) [RHEL-141216] {CVE-2026-46105}
- scsi: mpt3sas: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Add configurable command retry limit for slow-to-respond devices (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Add firmware event requeue support for busy devices (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Improve device discovery and readiness handling for slow devices (Chandrakanth Patil) [RHEL-141216]
- scsi: mpt3sas: Added no_turs flag to device unblock logic (Chandrakanth Patil) [RHEL-141216]
- scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Fix typo and grammar (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Fix typo (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add retry mechanism for IOC shutdown with timeout reset (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add queue-full tracking for operational request queues (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Reset controller on invalid I/O completion (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Chandrakanth Patil) [RHEL-141215] {CVE-2026-43473}
- scsi: mpi3mr: Make driver probing asynchronous (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Driver version update to 8.17.0.3.50 (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Fixed the W=1 compilation warning (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Record and report controller firmware faults (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Update MPI Headers to revision 39 (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Use negotiated link rate from DevicePage0 (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Avoid redundant diag-fault resets (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Rename log data save helper to reflect threaded/BH context (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Add module parameter to control threaded IRQ polling (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Simplify the workqueue allocation code (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil) [RHEL-141215]
- scsi: mpi3mr: Prevent duplicate SAS/SATA device entries in channel 1 (Chandrakanth Patil) [RHEL-141215]

Tue, 04 Aug 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-255.el10]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-169756]
- xfrm: esp: restore combined single-frag length gate (Xin Long) [RHEL-178329]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Xin Long) [RHEL-180168] {CVE-2026-46116}
- espintcp: Fix race condition in espintcp_close() (Xin Long) [RHEL-154898] {CVE-2026-23239}
- pseries/lparcfg: Add resource group monitoring (Mamatha Inamdar) [RHEL-217019]
- nvme-apple: drop invalid put of admin queue reference count (Maurizio Lombardi) [RHEL-54175]
- nvme-core: warn on allocating admin tag set with existing queue (Maurizio Lombardi) [RHEL-54175]
- nvme-core: fix unsigned comparison warning in nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-54175]
- nvmet-loop: do not alloc admin tag set during reset (Maurizio Lombardi) [RHEL-54175]
- nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl (Maurizio Lombardi) [RHEL-54175]
- nvme: add sysfs attribute to change IO timeout per controller (Maurizio Lombardi) [RHEL-54175]
- nvme: add sysfs attribute to change admin timeout per nvme controller (Maurizio Lombardi) [RHEL-54175]
- nvme: remove redundant timeout argument from nvme_wait_freeze_timeout (Maurizio Lombardi) [RHEL-54175]
- nvme: Let the blocklayer set timeouts for requests (Maurizio Lombardi) [RHEL-54175]
- ata: libata-pmp: add JMicron JMS562 quirk (Tomas Henzl) [RHEL-157217]
- ata: libata-core: disable LPM on ADATA SU680 SSD (Tomas Henzl) [RHEL-157217]
- ata: libata-core: Disable LPM on ST1000DM010-2EP102 (Tomas Henzl) [RHEL-157217]
- ata: libata-core: Disable LPM on ST2000DM008-2FR102 (Tomas Henzl) [RHEL-157217]
- ata: libata: Fix ata_exec_internal() (Tomas Henzl) [RHEL-157217]
- ata: libata-eh: Do not retry reset if the device is gone (Tomas Henzl) [RHEL-157217]
- ata: libata: avoid long timeouts on hot-unplugged SATA DAS (Tomas Henzl) [RHEL-157217]
- ata: libata-eh: avoid unnecessary calls to ata_scsi_port_error_handler() (Tomas Henzl) [RHEL-157217]
- ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 (Tomas Henzl) [RHEL-157217]
- ata: ahci: Do not read the per port area for unimplemented ports (Tomas Henzl) [RHEL-157217]
- ata: ahci: fail probe if BAR too small for claimed ports (Tomas Henzl) [RHEL-157217]
- scsi: core: wake eh reliably when using scsi_schedule_eh (David Jeffery) [RHEL-208594]
- ksmbd: fix memory leak of xattr_stream_name in smb2_rename() (Paulo Alcantara) [RHEL-190706]
- ksmbd: zero the smb2_read alignment tail to avoid an infoleak (Paulo Alcantara) [RHEL-190706]
- ksmbd: pin conn during async oplock break notification (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix integer overflow in set_file_allocation_info() (Paulo Alcantara) [RHEL-190706]
- smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-190706]
- smb: client: reject overlapping data areas in SMB2 responses (Paulo Alcantara) [RHEL-190706]
- smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-190706]
- smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-190706]
- smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-190706]
- smb/client: handle overlapping allocated ranges in fallocate (Paulo Alcantara) [RHEL-190706]
- smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-190706]
- smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-190706]
- redhat/configs: enable CONFIG_CIFS_SMB_DIRECT (Paulo Alcantara) [RHEL-190706]
- redhat/configs: disable CONFIG_SMB_KUNIT_TESTS (Paulo Alcantara) [RHEL-190706]
- scatterlist: Fix offset in folio calc in extract_xarray_to_sg() (Paulo Alcantara) [RHEL-190706]
- iov_iter: Fix a memory leak in iov_iter_extract_user_pages() (Paulo Alcantara) [RHEL-190706]
- iov_iter: Fix missing alloc fail check in iov_iter_extract_bvec_pages() (Paulo Alcantara) [RHEL-190706]
- iov_iter: Fix potential underflow in iov_iter_extract_xarray_pages() (Paulo Alcantara) [RHEL-190706]
- cachefiles: Fix double fput (Paulo Alcantara) [RHEL-190706]
- smb: client: mask server-provided mode to 07777 in modefromsid (Paulo Alcantara) [RHEL-190706]
- smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-190706]
- smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-190706]
- smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-190706]
- smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix overflow in passthrough ioctl bounds check (Paulo Alcantara) [RHEL-190706]
- smb: client: fix busy dentry warning on unmount after DIO (Paulo Alcantara) [RHEL-190706]
- cifs: Fix support for creating SFU fifo (Paulo Alcantara) [RHEL-190706]
- cifs: Fix support for creating SFU socket (Paulo Alcantara) [RHEL-190706]
- smb: client: fix atime clamp check in read completion (Paulo Alcantara) [RHEL-190706]
- cifs: validate DFS referral string offsets (Paulo Alcantara) [RHEL-190706]
- smb: client: use GFP_KERNEL for DFS cache allocations (Paulo Alcantara) [RHEL-190706]
- smb: client: restrict implied bcc[0] exemption to responses without data area (Paulo Alcantara) [RHEL-190706]
- smb: client: preserve leading slash for POSIX absolute symlink targets (Paulo Alcantara) [RHEL-190706]
- smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix barriering when walking subrequest list (Paulo Alcantara) [RHEL-190706]
- cifs: Fix missing credit release on failure in cifs_issue_read() (Paulo Alcantara) [RHEL-190706]
- cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
- smb: client: use unaligned reads in parse_posix_ctxt() (Paulo Alcantara) [RHEL-190706]
- smb: client: harden POSIX SID length parsing (Paulo Alcantara) [RHEL-190706]
- netfs: Fix DIO write retry for filesystems without a -&amp;gt;prepare_write() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix folio state after ENOMEM whilst under writeback iteration (Paulo Alcantara) [RHEL-190706]
- netfs: Fix writeback error handling (Paulo Alcantara) [RHEL-190706]
- netfs: Fix writethrough to use collection offload (Paulo Alcantara) [RHEL-190706]
- netfs: Replace wb_lock with a bit lock for asynchronicity (Paulo Alcantara) [RHEL-190706]
- netfs: Fix kdoc warning (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_create_write_req() to handle async cache object creation (Paulo Alcantara) [RHEL-190706]
- netfs: Fix decision whether to disallow write-streaming due to fscache use (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix app-instance durable supersede session UAF (Paulo Alcantara) [RHEL-190706]
- ksmbd: snapshot previous oplock state before durable checks (Paulo Alcantara) [RHEL-190706]
- ksmbd: close superseded durable handles through refcount handoff (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of fp-&amp;gt;owner.name in durable handle owner check (Paulo Alcantara) [RHEL-190706]
- smb/server: do not require delete access for non-replacing links (Paulo Alcantara) [RHEL-190706]
- ksmbd: don't hold ci-&amp;gt;m_lock while waiting for a lease break ack (Paulo Alcantara) [RHEL-190706]
- ksmbd: annotate oplock list traversals under m_lock (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix outstanding credit leak on abort and error paths (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix credit charge calculation for SMB2 QUERY_INFO (Paulo Alcantara) [RHEL-190706]
- ksmbd: avoid zeroing the read buffer in smb2_read() (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl (Paulo Alcantara) [RHEL-190706]
- ksmbd: reject undersized DACLs before parsing ACEs (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr (Paulo Alcantara) [RHEL-190706]
- ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr (Paulo Alcantara) [RHEL-190706]
- cifs: define variable sized buffer for querydir responses (Paulo Alcantara) [RHEL-190706]
- smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-190706]
- smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-190706]
- smb: client: Fix next buffer leak in receive_encrypted_standard() (Paulo Alcantara) [RHEL-190706]
- smb/client: use %pe to print error pointer (Paulo Alcantara) [RHEL-190706]
- smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-190706]
- smb common: add missing AAPL defines (Paulo Alcantara) [RHEL-190706]
- smb/client: fix chown/chgrp with SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-190706]
- smb/client: fix security flag calculation when setting security descriptors (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix kernel-doc warnings in smb2_lease_break_noti() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix inconsistent indenting warnings (Paulo Alcantara) [RHEL-190706]
- ksmbd: increase SMB3_DEFAULT_TRANS_SIZE from 1MB to 4MB (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix UBSAN array-index-out-of-bounds in decode_compress_ctxt() (Paulo Alcantara) [RHEL-190706]
- ksmbd: sleep interruptibly in the durable handle scavenger (Paulo Alcantara) [RHEL-190706]
- ksmbd: start file id allocation at 1 (Paulo Alcantara) [RHEL-190706]
- ksmbd: treat read-control opens as stat opens only for leases (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate :: stream type against directory create (Paulo Alcantara) [RHEL-190706]
- ksmbd: break conflicting-open leases only as far as needed (Paulo Alcantara) [RHEL-190706]
- ksmbd: break handle caching for share conflicts (Paulo Alcantara) [RHEL-190706]
- ksmbd: normalize ungrantable lease states (Paulo Alcantara) [RHEL-190706]
- ksmbd: return oplock protocol error for level II ack (Paulo Alcantara) [RHEL-190706]
- ksmbd: avoid level II oplock break notification on unlink (Paulo Alcantara) [RHEL-190706]
- ksmbd: downgrade oplock after break timeout (Paulo Alcantara) [RHEL-190706]
- ksmbd: apply create security descriptor first (Paulo Alcantara) [RHEL-190706]
- ksmbd: return requested create allocation size (Paulo Alcantara) [RHEL-190706]
- ksmbd: tighten create file attribute validation (Paulo Alcantara) [RHEL-190706]
- ksmbd: reject empty-attribute synchronize-only create (Paulo Alcantara) [RHEL-190706]
- ksmbd: honor stream delete sharing for base file (Paulo Alcantara) [RHEL-190706]
- ksmbd: send pending interim for last compound I/O (Paulo Alcantara) [RHEL-190706]
- ksmbd: return success for deferred final close (Paulo Alcantara) [RHEL-190706]
- ksmbd: preserve compound responses for chained errors (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate handle for create or get object id (Paulo Alcantara) [RHEL-190706]
- ksmbd: propagate failed command status in related compounds (Paulo Alcantara) [RHEL-190706]
- ksmbd: deny renaming directory with open children (Paulo Alcantara) [RHEL-190706]
- ksmbd: check parent directory sharing conflicts on rename (Paulo Alcantara) [RHEL-190706]
- ksmbd: preserve open change time across rename (Paulo Alcantara) [RHEL-190706]
- ksmbd: handle durable v2 app instance id (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable reconnect context parsing (Paulo Alcantara) [RHEL-190706]
- ksmbd: invalidate durable handles on oplock break (Paulo Alcantara) [RHEL-190706]
- ksmbd: supersede disconnected delete-on-close durable handle (Paulo Alcantara) [RHEL-190706]
- ksmbd: handle missing create contexts for lease opens (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of conn-&amp;gt;preauth_info in concurrent SMB2 NEGOTIATE (Paulo Alcantara) [RHEL-190706]
- ksmbd: keep common response iovecs in the work item (Paulo Alcantara) [RHEL-190706]
- ksmbd: route v2 lease breaks on the client lease channel (Paulo Alcantara) [RHEL-190706]
- ksmbd: break RH leases before delete-on-close (Paulo Alcantara) [RHEL-190706]
- ksmbd: honor SMB2 v2 lease epochs (Paulo Alcantara) [RHEL-190706]
- ksmbd: do not wait for RH lease break ack on overwrite (Paulo Alcantara) [RHEL-190706]
- ksmbd: chain pending lease breaks before waking waiters (Paulo Alcantara) [RHEL-190706]
- ksmbd: compute lease break-in-progress flag on response (Paulo Alcantara) [RHEL-190706]
- ksmbd: treat unnamed DATA stream as base file (Paulo Alcantara) [RHEL-190706]
- ksmbd: align SMB2 oplock break ack handling (Paulo Alcantara) [RHEL-190706]
- ksmbd: share SMB2 lease state across opens (Paulo Alcantara) [RHEL-190706]
- ksmbd: clean up lease response flags and directory leases (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix lease break and ack state handling (Paulo Alcantara) [RHEL-190706]
- ksmbd: use connection ClientGUID for lease lookup (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate SMB2 lease create contexts (Paulo Alcantara) [RHEL-190706]
- smb/server: fix debug log endianness in smb2_cancel() (Paulo Alcantara) [RHEL-190706]
- ksmbd: track the connection owning a byte-range lock (Paulo Alcantara) [RHEL-190706]
- smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix query directory replay double-free (Paulo Alcantara) [RHEL-190706]
- smb: client: fix change notify replay double-free (Paulo Alcantara) [RHEL-190706]
- smb: client: fix query_info() replay double-free (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_ioctl() replay (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_open() replay (Paulo Alcantara) [RHEL-190706]
- smb: client: fix double-free in SMB2_flush() replay (Paulo Alcantara) [RHEL-190706]
- ksmbd: use opener credentials for FSCTL mutations (Paulo Alcantara) [RHEL-190706]
- ksmbd: use opener credentials for ADS I/O (Paulo Alcantara) [RHEL-190706]
- ksmbd: require source read access for duplicate extents (Paulo Alcantara) [RHEL-190706]
- ksmbd: run set info with opener credentials (Paulo Alcantara) [RHEL-190706]
- ksmbd: use opener credentials for delete-on-close (Paulo Alcantara) [RHEL-190706]
- ksmbd: serialize QUERY_DIRECTORY requests per file (Paulo Alcantara) [RHEL-190706]
- ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE (Paulo Alcantara) [RHEL-190706]
- ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION (Paulo Alcantara) [RHEL-190706]
- ksmbd: reject non-VALID session in compound request branch (Paulo Alcantara) [RHEL-190706]
- ksmbd: compress SMB2 READ responses (Paulo Alcantara) [RHEL-190706]
- ksmbd: negotiate and decode SMB2 compression (Paulo Alcantara) [RHEL-190706]
- cifs: negotiate chained SMB2 compression capabilities (Paulo Alcantara) [RHEL-190706]
- smb: add common SMB2 compression transform helpers (Paulo Alcantara) [RHEL-190706]
- smb: move LZ77 compression into common code (Paulo Alcantara) [RHEL-190706]
- ksmbd: add per-handle permission check to FILE_LINK_INFORMATION (Paulo Alcantara) [RHEL-190706]
- ksmbd: add a permission check for FSCTL_SET_ZERO_DATA (Paulo Alcantara) [RHEL-190706]
- ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL (Paulo Alcantara) [RHEL-190706]
- smb: server: remove code guarded by nonexistent config option (Paulo Alcantara) [RHEL-190706]
- smb/server: fix incorrect file size in get_file_compression_info() (Paulo Alcantara) [RHEL-190706]
- smb/server: get compression format in get_file_compression_info() (Paulo Alcantara) [RHEL-190706]
- smb/server: implement FSCTL_SET_COMPRESSION ioctl handler (Paulo Alcantara) [RHEL-190706]
- smb/server: implement FSCTL_GET_COMPRESSION ioctl handler (Paulo Alcantara) [RHEL-190706]
- smb/server: get compression file attribute on open (Paulo Alcantara) [RHEL-190706]
- smb: move compression definitions into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- smb: remove duplicate server/smbfsctl.h (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in same_client_has_lease() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl() (Paulo Alcantara) [RHEL-190706]
- smb: client: Use more common code in SMB2_tcon() (Paulo Alcantara) [RHEL-190706]
- smb: client: Use more common error handling code in smb3_reconfigure() (Paulo Alcantara) [RHEL-190706]
- smb/client: Fix error code in smb2_aead_req_alloc() (Paulo Alcantara) [RHEL-190706]
- smb/client: clean up a type issue in cifs_xattr_get() (Paulo Alcantara) [RHEL-190706]
- smb/client: allow FS_IOC_SETFLAGS to clear compression (Paulo Alcantara) [RHEL-190706]
- smb/client: use writable handle for FS_IOC_SETFLAGS compression (Paulo Alcantara) [RHEL-190706]
- smb/client: always return a value for FS_IOC_GETFLAGS (Paulo Alcantara) [RHEL-190706]
- smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-190706]
- smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-190706]
- cifs: validate full SID length in security descriptors (Paulo Alcantara) [RHEL-190706]
- smb: client: resolve SWN tcon from live registrations (Paulo Alcantara) [RHEL-190706]
- cifs: remove all cifs files before kill super (Paulo Alcantara) [RHEL-190706]
- smb: client: fix conflicting option validation for new mount API (Paulo Alcantara) [RHEL-190706]
- cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-190706]
- smb: client: convert cifs_smb3_do_mount() to sget_fc() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix NULL-deref of opinfo-&amp;gt;conn in oplock/lease break notifiers (Paulo Alcantara) [RHEL-190706]
- smb: client: fix uninitialized variable in smb2_writev_callback (Paulo Alcantara) [RHEL-190706]
- smb: client: detect short folioq copy in cifs_copy_folioq_to_iter() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE (Paulo Alcantara) [RHEL-190706]
- ksmbd: release ksmbd_inode ref via ksmbd_inode_put on lookup paths (Paulo Alcantara) [RHEL-190706]
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops (Paulo Alcantara) [RHEL-190706]
- smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate SID in parent security descriptor during ACL inheritance (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable reconnect error path file lifetime (Paulo Alcantara) [RHEL-190706]
- smb: client: change allocation requirements in DUP_CTX_STR macro (Paulo Alcantara) [RHEL-190706]
- smb: client: require net admin for CIFS SWN netlink (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: divide, not multiply, milliseconds by 1000 (Paulo Alcantara) [RHEL-190706]
- cifs: Fix busy dentry used after unmounting (Paulo Alcantara) [RHEL-190706]
- smb: client: use data_len for SMB2 READ encrypted folioq copy (Paulo Alcantara) [RHEL-190706]
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (Paulo Alcantara) [RHEL-190706]
- cifs: Fix undefined variables (Paulo Alcantara) [RHEL-190706]
- smbdirect: Fix error cleanup in smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
- smb: client: avoid integer overflow in SMB2 READ length check (Paulo Alcantara) [RHEL-190706]
- cifs: client: stage smb3_reconfigure() updates and restore ctx on failure (Paulo Alcantara) [RHEL-190706]
- smb/client: fix possible infinite loop and oob read in symlink_data() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix null pointer dereference in compare_guid_key() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix null pointer dereference in proc_show_files() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow (Paulo Alcantara) [RHEL-190706]
- SMB3.1.1: add missing QUERY_DIR info levels (Paulo Alcantara) [RHEL-190706]
- netfs, afs: Fix write skipping in dir/link writepages (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_read_folio() to wait on writeback (Paulo Alcantara) [RHEL-190706]
- netfs: Fix folio-&amp;gt;private handling in netfs_perform_write() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix partial invalidation of streaming-write folio (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix leak of request in netfs_write_begin() error handling (Paulo Alcantara) [RHEL-190706]
- netfs: Fix early put of sink folio in netfs_read_gaps() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix write streaming disablement if fd open O_RDWR (Paulo Alcantara) [RHEL-190706]
- netfs: Fix read-gaps to remove netfs_folio from filled folio (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential deadlock in write-through mode (Paulo Alcantara) [RHEL-190706]
- netfs: Fix streaming write being overwritten (Paulo Alcantara) [RHEL-190706]
- netfs: Defer the emission of trace_netfs_folio() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (Paulo Alcantara) [RHEL-190706]
- netfs: Fix overrun check in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
- netfs: fix error handling in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential uninitialised var in netfs_extract_user_iter() (Paulo Alcantara) [RHEL-190706]
- netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call (Paulo Alcantara) [RHEL-190706]
- netfs: Fix zeropoint update where i_size &amp;gt; remote_i_size (Paulo Alcantara) [RHEL-190706]
- netfs: Fix potential for tearing in -&amp;gt;remote_i_size and -&amp;gt;zero_point (Paulo Alcantara) [RHEL-190706]
- netfs: Fix netfs_read_to_pagecache() to pause on subreq failure (Paulo Alcantara) [RHEL-190706]
- netfs: Fix missing barriers when accessing stream-&amp;gt;subrequests locklessly (Paulo Alcantara) [RHEL-190706]
- netfs: Fix missing locking around retry adding new subreqs (Paulo Alcantara) [RHEL-190706]
- netfs: Fix cancellation of a DIO and single read subrequests (Paulo Alcantara) [RHEL-190706]
- smb/client: fix out-of-bounds read in symlink_data() (Paulo Alcantara) [RHEL-190706]
- smb: client: Zero-pad short GSS session keys per MS-SMB2 (Paulo Alcantara) [RHEL-190706]
- smb: client: Use FullSessionKey for AES-256 encryption key derivation (Paulo Alcantara) [RHEL-190706]
- cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate inherited ACE SID length (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix kernel-doc warnings from ksmbd_conn_get/put() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fail share config requests when path allocation fails (Paulo Alcantara) [RHEL-190706]
- ksmbd: close durable scavenger races against m_fp_list lookups (Paulo Alcantara) [RHEL-190706]
- ksmbd: harden file lifetime during session teardown (Paulo Alcantara) [RHEL-190706]
- ksmbd: centralize ksmbd_conn final release to plug transport leak (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: fix MR registration for coalesced SG lists (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce and use include/linux/smbdirect.h (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: make use of DEFAULT_SYMBOL_NAMESPACE and EXPORT_SYMBOL_GPL (Paulo Alcantara) [RHEL-190706]
- cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-190706]
- smb: client: change allocation requirements in smb2_compound_op (Paulo Alcantara) [RHEL-190706]
- ksmbd: rewrite stop_sessions() with restartable iteration (Paulo Alcantara) [RHEL-190706]
- smb: server: handle readdir_info_level_struct_sz() error (Paulo Alcantara) [RHEL-190706]
- smb/client: remove unused smb3_parse_opt() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: move fs/smb/common/smbdirect/ to fs/smb/smbdirect/ (Paulo Alcantara) [RHEL-190706]
- smb: common: add SMB3_COMPRESS_MAX_ALGS (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: add code docs to lz77.c (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: LZ77 optimizations (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: increase LZ77_MATCH_MAX_DIST (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: fix counting in LZ77 match finding (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: fix buffer overrun in lz77_compress() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix (remove) drop_dir_cache module parameter (Paulo Alcantara) [RHEL-190706]
- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Paulo Alcantara) [RHEL-190706]
- smb: server: stop sending fake security descriptors (Paulo Alcantara) [RHEL-190706]
- ksmbd: scope conn-&amp;gt;binding slowpath to bound sessions only (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix CreateOptions sanitization clobbering the whole field (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix O(N^2) DoS in smb2_lock via unbounded LockCount (Paulo Alcantara) [RHEL-190706]
- ksmbd: destroy async_ida in ksmbd_conn_free() (Paulo Alcantara) [RHEL-190706]
- ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() (Paulo Alcantara) [RHEL-190706]
- MAINTAINERS: create entry for smbdirect (Paulo Alcantara) [RHEL-190706]
- ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id() (Paulo Alcantara) [RHEL-190706]
- cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
- smb: client: compress: fix bad encoding on last LZ77 flag (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment (Paulo Alcantara) [RHEL-190706]
- ksmbd: use check_add_overflow() to prevent u16 DACL size overflow (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in smb2_open during durable reconnect (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() (Paulo Alcantara) [RHEL-190706]
- smb: server: fix max_connections off-by-one in tcp accept path (Paulo Alcantara) [RHEL-190706]
- ksmbd: require minimum ACE size in smb_check_perm_dacl() (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate response sizes in ipc_validate_msg() (Paulo Alcantara) [RHEL-190706]
- smb: server: fix active_num_conn leak on transport allocation failure (Paulo Alcantara) [RHEL-190706]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_connection_deregister_mr_io unlock while waiting (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: fix the logic in smbdirect_socket_destroy_sync() without an error (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: fix copyright header of smbdirect.h (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: change smbdirect_socket_parameters.{initiator_depth,responder_resources} to __u16 (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: remove unused SMBDIRECT_USE_INLINE_C_FILES logic (Paulo Alcantara) [RHEL-190706]
- smb: server: no longer use smbdirect_socket_set_custom_workqueue() (Paulo Alcantara) [RHEL-190706]
- smb: client: no longer use smbdirect_socket_set_custom_workqueue() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce global workqueues (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: prepare use of dedicated workqueues for different steps (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: remove unused smbdirect_connection_mr_io_recovery_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: wrap rdma_disconnect() in rdma_[un]lock_handler() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_netdev_rdma_capable_mode_type() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_netdev_rdma_capable_mode_type() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect.ko (Paulo Alcantara) [RHEL-190706]
- smb: server: remove unused ksmbd_transport_ops.prepare() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_{listen,accept}() (Paulo Alcantara) [RHEL-190706]
- smb: server: only use public smbdirect functions (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_create_accepting()/smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_{socket_init_accepting,connection_wait_for_connected}() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_send_iter() and related functions (Paulo Alcantara) [RHEL-190706]
- smb: server: let smb_direct_post_send_data() return data_length (Paulo Alcantara) [RHEL-190706]
- smb: server: split out smb_direct_send_iter() out of smb_direct_writev() (Paulo Alcantara) [RHEL-190706]
- smb: server: let smbdirect_map_sges_from_iter() truncate the message boundary (Paulo Alcantara) [RHEL-190706]
- smb: server: inline smb_direct_create_header() into smb_direct_post_send_data() (Paulo Alcantara) [RHEL-190706]
- smb: server: move iov_iter_kvec() out of smb_direct_post_send_data() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_destroy_sync() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of functions from smbdirect_rw.c (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_wait_for_credits() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_get_buf_page_count() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_recv_io_refill[_work]() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_schedule_cleanup() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect.ko (Paulo Alcantara) [RHEL-190706]
- smb: client: only use public smbdirect functions (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_create_kern()/smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_init_new() and smbdirect_connect_sync() (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce and use smbd_debug_proc_show() (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce and use smbd_mr_fill_buffer_descriptor() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_send_{single_iter,immediate_work}() (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send_full_iter() get remaining_length and return data_length (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send_iter() get remaining_length and return data_length (Paulo Alcantara) [RHEL-190706]
- smb: client: change smbd_post_send_empty() to void return (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_destroy_sync() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of functions from smbdirect_mr.c (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_recv_io_refill_work() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: initialize recv_io-&amp;gt;cqe.done = recv_done just once (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_map_sges_from_iter() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_schedule_cleanup() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce the basic smbdirect.ko (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_{listen,accept}() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_bind() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: split out smbdirect_accept_negotiate_finish() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_init_send_batch_storage() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: provide explicit prototypes for cross .c file functions (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_public.h with prototypes (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_internal.h define pr_fmt without SMBDIRECT_USE_INLINE_C_FILES (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_socket.h include all headers for used structures (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_create_{kern,accepting}() and smbdirect_socket_release() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_accept_connect_request() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connect[_sync]() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect_socket_set_initial_parameters() call rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_init_{new,accepting}() and helpers (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_shutdown() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_is_connected() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_wait_for_connected() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_legacy_debug_proc_show() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_mr_io_fill_buffer_descriptor() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_negotiation_done() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_send_immediate_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_send_iter() and related functions (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_request_keep_alive() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_grant_recv_credits() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_recvmsg() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_rdma_{established,event_handler}() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_destroy[_sync]() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_recv_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: define SMBDIRECT_RDMA_CM_[RNR_]RETRY (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: define SMBDIRECT_MIN_{RECEIVE,FRAGMENTED}_SIZE (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_rw.c with server rw code (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_mr.c with client mr code (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_wait_for_credits() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_get_buf_page_count() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: split out smbdirect_connection_recv_io_refill() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_recv_io_refill_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_post_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{create,destroy}_qp() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_negotiate_rdma_resources() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_qp_event_handler() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_map_sges_from_iter() and helper functions (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{create,destroy}_mem_pools() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_send_io_done() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{alloc,free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.{send,recv}_io.mem.gfp_mask (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_frwr_is_supported() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: set SMBDIRECT_KEEPALIVE_NONE before disable_delayed_work(&amp;amp;sc-&amp;gt;idle.timer_work); (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_idle_timer_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_reassembly_{append,first}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection_{get,put}_recv_io() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_connection.c to be filled (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_schedule_cleanup[{_lvl,_status}]() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_cleanup_work() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_wake_up_all() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_set_logging() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket_prepare_create() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.c to be filled (Paulo Alcantara) [RHEL-190706]
- smb: server: include smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
- smb: client: include smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_internal.h (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_all_c_files.c (Paulo Alcantara) [RHEL-190706]
- smb: client: fix integer underflow in receive_encrypted_read() (Paulo Alcantara) [RHEL-190706]
- smb: client: add tracepoints for deferred handle caching (Paulo Alcantara) [RHEL-190706]
- smb: client: add oplock level to smb3_open_done tracepoint (Paulo Alcantara) [RHEL-190706]
- smb: client: add tracepoint for local lock conflicts (Paulo Alcantara) [RHEL-190706]
- smb: client: add tracepoints for lock operations (Paulo Alcantara) [RHEL-190706]
- smb: client: allow both 'lease' and 'nolease' mount options (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: add some logging to SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.logging infrastructure (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: let smbdirect.h include #include &amp;lt;linux/types.h&amp;gt; (Paulo Alcantara) [RHEL-190706]
- smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-190706]
- smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc (Paulo Alcantara) [RHEL-190706]
- ksmbd: require 3 sub-authorities before reading sub_auth[2] (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate EaNameLength in smb2_get_ea() (Paulo Alcantara) [RHEL-190706]
- ksmbd: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-190706]
- ksmbd: validate owner of durable handle on reconnect (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger (Paulo Alcantara) [RHEL-190706]
- ksmbd: ipc: use kzalloc_flex and __counted_by (Paulo Alcantara) [RHEL-190706]
- smb: move filesystem_vol_info into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- smb: move file_basic_info into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- smb: move some definitions from common/smb2pdu.h into common/fscc.h (Paulo Alcantara) [RHEL-190706]
- vfs: get rid of BUG_ON() in d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-190706]
- smb: client: get rid of d_drop()+d_add() (Paulo Alcantara) [RHEL-190706]
- smb: client: set ATTR_TEMPORARY with O_TMPFILE | O_EXCL (Paulo Alcantara) [RHEL-190706]
- smb: client: add support for O_TMPFILE (Paulo Alcantara) [RHEL-190706]
- vfs: introduce d_mark_tmpfile_name() (Paulo Alcantara) [RHEL-190706]
- smb: client: add missing MODULE_DESCRIPTION() to smb1maperror_test (Paulo Alcantara) [RHEL-190706]
- smb: client: Remove unnecessary selection of CRYPTO_ECB (Paulo Alcantara) [RHEL-190706]
- smb/client: move smb2maperror declarations to smb2proto.h (Paulo Alcantara) [RHEL-190706]
- smb/client: introduce KUnit tests to check DOS/SRV err mapping search (Paulo Alcantara) [RHEL-190706]
- smb/client: check if SMB1 DOS/SRV error mapping arrays are sorted (Paulo Alcantara) [RHEL-190706]
- smb/client: use binary search for SMB1 DOS/SRV error mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: autogenerate SMB1 DOS/SRV to POSIX error mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: annotate smberr.h with POSIX error codes (Paulo Alcantara) [RHEL-190706]
- smb/client: move ERRnetlogonNotStarted to DOS error class (Paulo Alcantara) [RHEL-190706]
- smb/client: introduce KUnit test to check ntstatus_to_dos_map search (Paulo Alcantara) [RHEL-190706]
- smb/client: check if ntstatus_to_dos_map is sorted (Paulo Alcantara) [RHEL-190706]
- smb/client: use binary search for NT status to DOS mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: refactor ntstatus_to_dos() to return mapping entry (Paulo Alcantara) [RHEL-190706]
- smb/client: replace nt_errs with ntstatus_to_dos_map (Paulo Alcantara) [RHEL-190706]
- smb/client: autogenerate SMB1 NT status to DOS error mapping (Paulo Alcantara) [RHEL-190706]
- smb/client: annotate nterr.h with DOS error codes (Paulo Alcantara) [RHEL-190706]
- smb/client: avoid null-ptr-deref when tests fail in test_cmp_map() (Paulo Alcantara) [RHEL-190706]
- fs/smb/client: add verbose error logging for UNC parsing (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix OOB write in QUERY_INFO for compound requests (Paulo Alcantara) [RHEL-190706]
- netfs: Fix the handling of stream-&amp;gt;front by removing it (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix potencial OOB in get_file_all_info() for compound requests (Paulo Alcantara) [RHEL-190706]
- smb/client: ensure smb2_mapping_table rebuild on cmd changes (Paulo Alcantara) [RHEL-190706]
- ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix memory leaks and NULL deref in smb2_lock() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() (Paulo Alcantara) [RHEL-190706]
- ksmbd: do not expire session on binding failure (Paulo Alcantara) [RHEL-190706]
- smb: client: fix generic/694 due to wrong -&amp;gt;i_blocks (Paulo Alcantara) [RHEL-190706]
- netfs: Fix read abandonment during retry (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in durable v2 replay of active file handles (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free of share_conf in compound request (Paulo Alcantara) [RHEL-190706]
- ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION (Paulo Alcantara) [RHEL-190706]
- ksmbd: unset conn-&amp;gt;binding on failed binding request (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix share_conf UAF in tree_conn disconnect (Paulo Alcantara) [RHEL-190706]
- cifs: smb1: fix comment typo (Paulo Alcantara) [RHEL-190706]
- smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix iface port assignment in parse_server_interfaces (Paulo Alcantara) [RHEL-190706]
- smb/client: only export symbol for 'smb2maperror-test' module (Paulo Alcantara) [RHEL-190706]
- smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-190706]
- smb: client: fix atomic open with O_DIRECT &amp;amp; O_SYNC (Paulo Alcantara) [RHEL-190706]
- netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry (Paulo Alcantara) [RHEL-190706]
- netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (Paulo Alcantara) [RHEL-190706]
- ksmbd: Don't log keys in SMB3 signing and encryption key generation (Paulo Alcantara) [RHEL-190706]
- smb: server: fix use-after-free in smb2_open() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free by using call_rcu() for oplock_info (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix use-after-free in proc_show_files due to early rcu_read_unlock (Paulo Alcantara) [RHEL-190706]
- smb/server: Fix another refcount leak in smb2_open() (Paulo Alcantara) [RHEL-190706]
- cifs: open files should not hold ref on superblock (Paulo Alcantara) [RHEL-190706]
- smb: update some doc references (Paulo Alcantara) [RHEL-190706]
- smb/client: make SMB2 maperror KUnit tests a separate module (Paulo Alcantara) [RHEL-190706]
- smb: client: Use snprintf in cifs_set_cifscreds (Paulo Alcantara) [RHEL-190706]
- smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Paulo Alcantara) [RHEL-190706]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-190706]
- netfs: Fix unbuffered/DIO writes to dispatch subrequests in strict sequence (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix signededness bug in smb_direct_prepare_negotiation() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix cifs_pick_channel when channels are equally loaded (Paulo Alcantara) [RHEL-190706]
- Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [cifs] (Paulo Alcantara) [RHEL-190706]
- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [cifs] (Paulo Alcantara) [RHEL-190706]
- Convert 'alloc_flex' family to use the new default GFP_KERNEL argument [cifs] (Paulo Alcantara) [RHEL-190706]
- Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [cifs] (Paulo Alcantara) [RHEL-190706]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [cifs] (Paulo Alcantara) [RHEL-190706]
- smb: client: terminate session upon failed client required signing (Paulo Alcantara) [RHEL-190706]
- smb: server: Remove duplicate include of misc.h (Paulo Alcantara) [RHEL-190706]
- cifs: update internal module version number (Paulo Alcantara) [RHEL-190706]
- smb/client: move NT_STATUS_MORE_ENTRIES (Paulo Alcantara) [RHEL-190706]
- smb/client: rename to NT_ERROR_INVALID_DATATYPE (Paulo Alcantara) [RHEL-190706]
- smb/client: rename to NT_STATUS_SOME_NOT_MAPPED (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_PRIVILEGE_NOT_HELD (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_MORE_PROCESSING_REQUIRED (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_BUFFER_OVERFLOW (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_NOTIFY_ENUM_DIR (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Remove duplicate include of cifs_debug.h (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix non-IPv6 build (Paulo Alcantara) [RHEL-190706]
- smb client: Add generated file to gitignore file (Paulo Alcantara) [RHEL-190706]
- ksmbd: convert tree_conns_lock to rw_semaphore (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix missing chann_lock while iterating session channel list (Paulo Alcantara) [RHEL-190706]
- ksmbd: add chann_lock to protect ksmbd_chann_list xarray (Paulo Alcantara) [RHEL-190706]
- cifs: Fix the copyright banner on smb1maperror.c (Paulo Alcantara) [RHEL-190706]
- smb: common: add header guards to fs/smb/common/smb2status.h (Paulo Alcantara) [RHEL-190706]
- smb: client: Avoid a dozen -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-190706]
- smb/client: remove useless comment in mapping_table_ERRSRV (Paulo Alcantara) [RHEL-190706]
- smb/client: remove some literal NT error codes from ntstatus_to_dos_map (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_VOLUME_NOT_UPGRADED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_NO_USER_KEYS (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_WRONG_EFS (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_NO_EFS (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_NO_RECOVERY_POLICY (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_RANGE_NOT_FOUND (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_DECRYPTION_FAILED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_ENCRYPTION_FAILED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_DIRECTORY_IS_A_REPARSE_POINT (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_VOLUME_DISMOUNTED (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_VARIABLE_NOT_FOUND (Paulo Alcantara) [RHEL-190706]
- smb/client: rename ERRinvlevel to ERRunknownlevel (Paulo Alcantara) [RHEL-190706]
- smb/client: add NT_STATUS_OS2_INVALID_LEVEL (Paulo Alcantara) [RHEL-190706]
- smb/client: map NT_STATUS_INVALID_INFO_CLASS to ERRbadpipe (Paulo Alcantara) [RHEL-190706]
- smb/client: introduce KUnit test to check search result of smb2_error_map_table (Paulo Alcantara) [RHEL-190706]
- smb/client: use bsearch() to find target in smb2_error_map_table (Paulo Alcantara) [RHEL-190706]
- smb/client: check whether smb2_error_map_table is sorted in ascending order (Paulo Alcantara) [RHEL-190706]
- cifs: Autogenerate SMB2 error mapping table (Paulo Alcantara) [RHEL-190706]
- smb: server: correct value for smb_direct_max_fragmented_recv_size (Paulo Alcantara) [RHEL-190706]
- smb: client: correct value for smbd_max_fragmented_recv_size (Paulo Alcantara) [RHEL-190706]
- smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() (Paulo Alcantara) [RHEL-190706]
- ksmbd: add procfs interface for runtime monitoring and statistics (Paulo Alcantara) [RHEL-190706]
- ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of rdma_restrict_node_type() (Paulo Alcantara) [RHEL-190706]
- smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-190706]
- smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-190706]
- smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-190706]
- smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-190706]
- smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-190706]
- smb: client: remove pointless sc-&amp;gt;send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-190706]
- smb: client: remove pointless sc-&amp;gt;recv_io.credits.count rollback (Paulo Alcantara) [RHEL-190706]
- smb: client: let smbd_post_send() make use of request-&amp;gt;wr (Paulo Alcantara) [RHEL-190706]
- smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-190706]
- smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
- smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-190706]
- smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-190706]
- smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-190706]
- smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-190706]
- smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-190706]
- cifs: Label SMB2 statuses with errors (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Make BCC accessors conditional (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: connect.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: sess.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: cifsencrypt.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: netmisc.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: misc.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: cifs_debug.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move inline funcs (Paulo Alcantara) [RHEL-190706]
- cifs: Fix cifs_dump_mids() to call -&amp;gt;dump_detail (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Don't return smb_hdr from cifs_{,small_}buf_get() (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move BCC access functions (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Adjust #includes (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Split SMB1 protocol defs into smb1pdu.h (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Add some #includes (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move some SMB1 received PDU checking bits to smb1transport.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Move some SMB1 receive bits to smb1transport.c (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Create smb1proto.h for SMB1 declarations (Paulo Alcantara) [RHEL-190706]
- cifs: SMB1 split: Rename cifstransport.c (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/ntlmssp.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/reparse.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/smb2proto.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_debug.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_swn.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/compress.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_spnego.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/fs_context.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/dns_resolve.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/dfs_cache.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/netlink.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifs_unicode.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/dfs.h (Paulo Alcantara) [RHEL-190706]
- cifs: Scripted clean up fs/smb/client/cached_dir.h (Paulo Alcantara) [RHEL-190706]
- smb: client: add multichannel async work for CONFIG_CIFS_DFS_UPCALL=n (Paulo Alcantara) [RHEL-190706]
- smb: client: introduce multichannel async work during mount (Paulo Alcantara) [RHEL-190706]
- smb: server: reset smb_direct_port = SMB_DIRECT_PORT_INFINIBAND on init (Paulo Alcantara) [RHEL-190706]
- ksmbd: smbd: fix dma_unmap_sg() nents (Paulo Alcantara) [RHEL-190706]
- nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks (Maurizio Lombardi) [RHEL-194153]
- tls: Preserve sk_err across recvmsg() when data has been copied (Sabrina Dubroca) [RHEL-152729]
- net: tls: prevent chain-after-chain in plain text SG (Sabrina Dubroca) [RHEL-152729]
- net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Sabrina Dubroca) [RHEL-152729]
- net: tls: fix silent data drop under pipe back-pressure (Sabrina Dubroca) [RHEL-152729]
- net: tls: fix strparser anchor skb leak on offload RX setup failure (Sabrina Dubroca) [RHEL-152729]
- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Sabrina Dubroca) [RHEL-152729]
- tls: Purge async_hold in tls_decrypt_async_wait() (Sabrina Dubroca) [RHEL-152729]
- tls: Fix race condition in tls_sw_cancel_work_tx() (Sabrina Dubroca) [RHEL-154841] {CVE-2026-23240}
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Sabrina Dubroca) [RHEL-189560] {CVE-2025-40149}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189578] {CVE-2025-71113}
- e1000e: limit endianness conversion to boundary words (Michal Schmidt) [RHEL-186602]
- e1000: limit endianness conversion to boundary words (Michal Schmidt) [RHEL-186602]
- e1000e: Use __napi_schedule_irqoff() (Michal Schmidt) [RHEL-186602]
- e1000e: use ktime_get_real_ns() in e1000e_systim_reset() (Michal Schmidt) [RHEL-186602]
- net: Consistently define pci_device_ids using named initializers [e1000e] (Michal Schmidt) [RHEL-186602]
- e1000e: Unroll PTP in probe error handling (Michal Schmidt) [RHEL-186602]
- e1000: check return value of e1000_read_eeprom (Michal Schmidt) [RHEL-186602]
- e1000/e1000e: Fix leak in DMA error cleanup (Michal Schmidt) [RHEL-186602]
- e1000e: clear DPG_EN after reset to avoid autonomous power-gating (Michal Schmidt) [RHEL-186602]
- e1000e: introduce new board type for Panther Lake PCH (Michal Schmidt) [RHEL-186602]
- Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
- Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
- treewide: Replace kmalloc with kmalloc_obj for non-scalar types [e1000,e1000e] (Michal Schmidt) [RHEL-186602]
- e1000e: Switch to use %ptSp (Michal Schmidt) [RHEL-186602]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186335]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186335]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186335]
- net: wwan: t7xx: Add delay between MD and SAP suspend (Jose Ignacio Tornos Martinez) [RHEL-155042]
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180156] {CVE-2026-46117}
- dt-bindings: input: add debounce-delay-ms common property (Tony Camuso) [RHEL-176366]
- dt-bindings: Update Sasha Finkelstein's email address (Tony Camuso) [RHEL-176366]
- MIPS/input: Move RB532 button to GPIO descriptors (Tony Camuso) [RHEL-176366]
- Input: uinput - take event lock when submitting FF request "event" (Tony Camuso) [RHEL-176366]
- Input: uinput - fix circular locking dependency with ff-core (Tony Camuso) [RHEL-176366]
- Input: aiptek - validate raw macro indices before updating state (Tony Camuso) [RHEL-176366]
- Input: synaptics_usb - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
- Input: appletouch - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
- Input: keyspan-remote - refactor endpoint lookup (Tony Camuso) [RHEL-176366]
- Input: aiptek - use HID headers (Tony Camuso) [RHEL-176366]
- Input: wm97xx - use guard notation when acquiring mutex (Tony Camuso) [RHEL-176366]
- Input: mk712 - use guard notation when acquiring spinlock (Tony Camuso) [RHEL-176366]
- Input: elo - use guard notation when acquiring mutex (Tony Camuso) [RHEL-176366]
- dt-bindings: input: matrix-keymap: fix key board wording (Tony Camuso) [RHEL-176366]
- Input: atlas - check ACPI_COMPANION() against NULL (Tony Camuso) [RHEL-176366]
- Input: atlas - convert ACPI driver to a platform one (Tony Camuso) [RHEL-176366]
- input: trackpoint - Enable doubletap by default on capable devices (Tony Camuso) [RHEL-176366]
- Input: psmouse - remove dedicated kpsmoused workqueue (Tony Camuso) [RHEL-176366]
- Input: alps - use standard workqueue when registering supplemental device (Tony Camuso) [RHEL-176366]
- Input: psmouse - replace flush_workqueue() with disable_delayed_work_sync() (Tony Camuso) [RHEL-176366]
- Input: atkbd - fix various formatting issues (Tony Camuso) [RHEL-176366]
- Input: atkbd - switch to using explicitly sized types (Tony Camuso) [RHEL-176366]
- Input: atkbd - use dev_warn_ratelimited() (Tony Camuso) [RHEL-176366]
- Input: atkbd - use __free() cleanup facility in when parsing FW keymap (Tony Camuso) [RHEL-176366]
- Input: atkbd - validate scancode in firmware keymap entries (Tony Camuso) [RHEL-176366]
- dt-bindings: input: Add Parade TC3408 touchscreen controller (Tony Camuso) [RHEL-176366]
- Input: export input_default_setkeycode (Tony Camuso) [RHEL-176366]
- Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table (Tony Camuso) [RHEL-176366]
- Input: bcm5974 - recover from failed mode switch (Tony Camuso) [RHEL-176366]
- Input: libps2 - embed WARN_ON(1) macros into their enclosing if statements (Tony Camuso) [RHEL-176366]
- dt-bindings: input: qcom,pm8941-pwrkey: Document PMM8654AU (Tony Camuso) [RHEL-176366]
- dt-bindings: input: touchscreen: imagis: allow linux,keycodes for ist3038 (Tony Camuso) [RHEL-176366]
- dt-bindings: Fix emails with spaces or missing brackets (Tony Camuso) [RHEL-176366]
- docs: fix 're-use' -&amp;gt; 'reuse' in documentation (Tony Camuso) [RHEL-176366]
- Input: gpio_keys - fall back to platform_get_irq() for interrupt-only keys (Tony Camuso) [RHEL-176366]
- Input: i8042 - add quirks for MECHREVO Wujie 15X Pro (Tony Camuso) [RHEL-176366]
- Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA (Tony Camuso) [RHEL-176366]
- Documentation: use a source-read extension for the index link boilerplate (Tony Camuso) [RHEL-176366]
- Input: appletouch - fix potential race between resume and open (Tony Camuso) [RHEL-176366]
- dt-bindings: input: i2c-hid: Introduce FocalTech FT8112 (Tony Camuso) [RHEL-176366]
- Input: synaptics_i2c - switch to using managed resources (Tony Camuso) [RHEL-176366]
- Input: synaptics_i2c - guard polling restart in resume (Tony Camuso) [RHEL-176366]
- kernel.h: drop hex.h and update all hex.h users (Tony Camuso) [RHEL-176366]
- Input: serio - complete sizeof(*pointer) conversions (Tony Camuso) [RHEL-176366]
- Input: elo - switch to use scnprintf() to suppress truncation warning (Tony Camuso) [RHEL-176366]
- Input: adp5589 - remove a leftover header file (Tony Camuso) [RHEL-176366]
- doc: input: fix typos in input.rst (Tony Camuso) [RHEL-176366]
- Input: add ABS_SND_PROFILE (Tony Camuso) [RHEL-176366]
- Input: psmouse-smbus - add WQ_UNBOUND to alloc_workqueue user (Tony Camuso) [RHEL-176366]
- Input: synaptics_i2c - replace use of system_wq with system_dfl_wq (Tony Camuso) [RHEL-176366]
- Input: gpio_keys - replace use of system_wq with system_dfl_wq (Tony Camuso) [RHEL-176366]
- Input: alps - fix use-after-free bugs caused by dev3_register_work (Tony Camuso) [RHEL-176366]
- dt-bindings: Updates Linus Walleij's mail address (Tony Camuso) [RHEL-176366]
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table (Tony Camuso) [RHEL-176366]
- Input: atkbd - skip deactivate for HONOR FMB-P's internal keyboard (Tony Camuso) [RHEL-176366]
- Input: cyapa - remove redundant pm_runtime_mark_last_busy() calls (Tony Camuso) [RHEL-176366]
- Input: byd - use %*ph for Z packet dump (Tony Camuso) [RHEL-176366]
- dt-bindings: Remove extra blank lines (Tony Camuso) [RHEL-176366]
- dt-bindings: Update Krzysztof Kozlowski's email (Tony Camuso) [RHEL-176366]
- dt-bindings: touchscreen: consolidate simple touch controller to trivial-touch.yaml (Tony Camuso) [RHEL-176366]
- Input: MT - add INPUT_MT_TOTAL_FORCE flags (Tony Camuso) [RHEL-176366]
- Input: rename INPUT_PROP_HAPTIC_TOUCHPAD to INPUT_PROP_PRESSUREPAD (Tony Camuso) [RHEL-176366]
- Input: add INPUT_PROP_HAPTIC_TOUCHPAD (Tony Camuso) [RHEL-176366]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nss_hesiod-2.39-135.el10.aarch64</title>
      <pubDate>Thu, 06 Aug 2026 10:35:48 AM GMT</pubDate>
      <guid isPermaLink="false">7e81fde2c1c901ecfc5e8b0edf89f01ea510e844ba9a328c7eebca85d64a3a4e</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/nss_hesiod-2.39-135.el10.aarch64.rpm</link>
      <description><p><strong>nss_hesiod</strong> - Name Service Switch (NSS) module using Hesiod&lt;br /&gt;</p>

<p>The nss_hesiod Name Service Switch module uses the Domain Name System&lt;br /&gt;
(DNS) as a source for user, group, and service information, following&lt;br /&gt;
the Hesiod convention of Project Athena.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 06 Aug 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-135
- Fix changelog entries (RHEL-33536, RHEL-167871)

Fri, 31 Jul 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-134
- Port resolver tests to native resolv framework (RHEL-33536)

Wed, 29 Jul 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-133
- Stop shipping glibc32-debuginfo (RHEL-142225)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nss_db-2.39-135.el10.aarch64</title>
      <pubDate>Thu, 06 Aug 2026 10:35:48 AM GMT</pubDate>
      <guid isPermaLink="false">98c389449d8c89f47b522936136a444dd725e4597bb3995d8d2a9e5ebe5b75b6</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/nss_db-2.39-135.el10.aarch64.rpm</link>
      <description><p><strong>nss_db</strong> - Name Service Switch (NSS) module using hash-indexed files&lt;br /&gt;</p>

<p>The nss_db Name Service Switch module uses hash-indexed files in /var/db&lt;br /&gt;
to speed up user, group, service, host name, and other NSS-based lookups.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 06 Aug 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-135
- Fix changelog entries (RHEL-33536, RHEL-167871)

Fri, 31 Jul 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-134
- Port resolver tests to native resolv framework (RHEL-33536)

Wed, 29 Jul 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-133
- Stop shipping glibc32-debuginfo (RHEL-142225)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glibc-static-2.39-135.el10.aarch64</title>
      <pubDate>Thu, 06 Aug 2026 10:35:48 AM GMT</pubDate>
      <guid isPermaLink="false">a0a9c745c0a42efff03dda2e60c4543b1309638ad435537d44d8c0d32823f181</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/glibc-static-2.39-135.el10.aarch64.rpm</link>
      <description><p><strong>glibc-static</strong> - C library static libraries for -static linking.&lt;br /&gt;</p>

<p>The glibc-static package contains the C library static libraries&lt;br /&gt;
for -static linking.  You don't need these, unless you link statically,&lt;br /&gt;
which is highly discouraged.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 06 Aug 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-135
- Fix changelog entries (RHEL-33536, RHEL-167871)

Fri, 31 Jul 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-134
- Port resolver tests to native resolv framework (RHEL-33536)

Wed, 29 Jul 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-133
- Stop shipping glibc32-debuginfo (RHEL-142225)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glibc-nss-devel-2.39-135.el10.aarch64</title>
      <pubDate>Thu, 06 Aug 2026 10:35:48 AM GMT</pubDate>
      <guid isPermaLink="false">d6d66e780aa90931fee049428b5de3fe6384a19529a0224ae4bd7cb14b564c4a</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/glibc-nss-devel-2.39-135.el10.aarch64.rpm</link>
      <description><p><strong>glibc-nss-devel</strong> - Development files for directly linking NSS service modules&lt;br /&gt;</p>

<p>The glibc-nss-devel package contains the object files necessary to&lt;br /&gt;
compile applications and libraries which directly link against NSS&lt;br /&gt;
modules supplied by glibc.&lt;br /&gt;
&lt;br /&gt;
This is a rare and special use case; regular development has to use&lt;br /&gt;
the glibc-devel package instead.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 06 Aug 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-135
- Fix changelog entries (RHEL-33536, RHEL-167871)

Fri, 31 Jul 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-134
- Port resolver tests to native resolv framework (RHEL-33536)

Wed, 29 Jul 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-133
- Stop shipping glibc32-debuginfo (RHEL-142225)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glibc-benchtests-2.39-135.el10.aarch64</title>
      <pubDate>Thu, 06 Aug 2026 10:35:48 AM GMT</pubDate>
      <guid isPermaLink="false">2f086587dba72fb123ea0bef90a0f2dcf99f1e3e1a94b63d5c8a19eb5586dc96</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/glibc-benchtests-2.39-135.el10.aarch64.rpm</link>
      <description><p><strong>glibc-benchtests</strong> - Benchmarking binaries and scripts for glibc&lt;br /&gt;</p>

<p>This package provides built benchmark binaries and scripts to run&lt;br /&gt;
microbenchmark tests on the system.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 06 Aug 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-135
- Fix changelog entries (RHEL-33536, RHEL-167871)

Fri, 31 Jul 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-134
- Port resolver tests to native resolv framework (RHEL-33536)

Wed, 29 Jul 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-133
- Stop shipping glibc32-debuginfo (RHEL-142225)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>sanlock-devel-5.1.0-3.el10.aarch64</title>
      <pubDate>Wed, 05 Aug 2026 04:16:25 PM GMT</pubDate>
      <guid isPermaLink="false">cc42fe1779f8e3cb4743ee794ca49d945c112462d4d10e4c9a87844d8c66451e</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/sanlock-devel-5.1.0-3.el10.aarch64.rpm</link>
      <description><p><strong>sanlock-devel</strong> - Development files for sanlock&lt;br /&gt;</p>

<p>The sanlock-devel package contains libraries and header files for&lt;br /&gt;
developing applications that use sanlock.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 05 Aug 2026 GMT - Marian Csontos &amp;lt;mcsontos@redhat.com&amp;gt; - 5.1.0-3
- Fix compatibility issue when upgrading from RHEL9.

Sun, 17 May 2026 GMT - Marian Csontos &amp;lt;mcsontos@redhat.com&amp;gt; - 5.1.0-2
- Bump release.

Tue, 28 Apr 2026 GMT - Marian Csontos &amp;lt;mcsontos@redhat.com&amp;gt; - 5.1.0-1
- new upstream release.
- Add support for atomic leases using compare and write.

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gdm-pam-extensions-devel-1:47.0-23.el10.aarch64</title>
      <pubDate>Wed, 05 Aug 2026 03:03:27 PM GMT</pubDate>
      <guid isPermaLink="false">26f20a9261bf22e65432356642c02938c56cbdc408c31bdf283f63aec5e8eb7a</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/gdm-pam-extensions-devel-47.0-23.el10.aarch64.rpm</link>
      <description><p><strong>gdm-pam-extensions-devel</strong> - Macros for developing GDM extensions to PAM&lt;br /&gt;</p>

<p>The gdm-pam-extensions-devel package contains headers and other&lt;br /&gt;
files that are helpful to PAM modules wishing to support&lt;br /&gt;
GDM specific authentication features.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 05 Aug 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-23
- Set GDM_AUTH_SESSION_ID env var for PAM conversations

Fri, 10 Jul 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-22
- Fix auth bypass in authselect pam substacks

Wed, 27 May 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-21
- Fix gdm-x-session parameter, now it uses "--handle-registration"

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gdm-devel-1:47.0-23.el10.aarch64</title>
      <pubDate>Wed, 05 Aug 2026 03:03:27 PM GMT</pubDate>
      <guid isPermaLink="false">58cfdfcc7c355367eb7390c2f28f2a6ba1f2ac2c6fb31611bd389355db06e160</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/gdm-devel-47.0-23.el10.aarch64.rpm</link>
      <description><p><strong>gdm-devel</strong> - Development files for gdm&lt;br /&gt;</p>

<p>The gdm-devel package contains headers and other&lt;br /&gt;
files needed to build custom greeters.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 05 Aug 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-23
- Set GDM_AUTH_SESSION_ID env var for PAM conversations

Fri, 10 Jul 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-22
- Fix auth bypass in authselect pam substacks

Wed, 27 May 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-21
- Fix gdm-x-session parameter, now it uses "--handle-registration"

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openblas-threads64_-0.3.33-1.el10.aarch64</title>
      <pubDate>Wed, 05 Aug 2026 12:33:46 PM GMT</pubDate>
      <guid isPermaLink="false">d16b7eb2ff521a1d386b2bcbf6ae3a30e8f0cb465659034326f321b592d5dbf7</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/openblas-threads64_-0.3.33-1.el10.aarch64.rpm</link>
      <description><p><strong>openblas-threads64_</strong> - An optimized BLAS library based on GotoBLAS2, pthreads version&lt;br /&gt;</p>

<p>&lt;br /&gt;
OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD&lt;br /&gt;
version. The project is supported by the Lab of Parallel Software and&lt;br /&gt;
Computational Science, ISCAS. http://www.rdcps.ac.cn&lt;br /&gt;
&lt;br /&gt;
This package contains the library compiled with threading support and&lt;br /&gt;
64-bit integer interface and a symbol name suffix.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 05 Aug 2026 GMT - Siteshwar Vashisht &amp;lt;svashisht@redhat.com&amp;gt; - 0.3.33-1
- Update to 0.3.33
  Resolves: RHEL-194533

Mon, 07 Jul 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-2
- Re-include openblas.pc
- Resolves: RHEL-72679

Wed, 09 Apr 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-1
- Update to 0.3.29
- Resolves: RHEL-82829

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openblas-threads64-0.3.33-1.el10.aarch64</title>
      <pubDate>Wed, 05 Aug 2026 12:33:46 PM GMT</pubDate>
      <guid isPermaLink="false">30296dd76424f86f5bd9aaa3c058cb2e7b48c0b5f265b61e3001446bc1f6f04a</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/openblas-threads64-0.3.33-1.el10.aarch64.rpm</link>
      <description><p><strong>openblas-threads64</strong> - An optimized BLAS library based on GotoBLAS2, pthreads version&lt;br /&gt;</p>

<p>&lt;br /&gt;
OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD&lt;br /&gt;
version. The project is supported by the Lab of Parallel Software and&lt;br /&gt;
Computational Science, ISCAS. http://www.rdcps.ac.cn&lt;br /&gt;
&lt;br /&gt;
This package contains the library compiled with threading support and&lt;br /&gt;
64-bit integer interface.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 05 Aug 2026 GMT - Siteshwar Vashisht &amp;lt;svashisht@redhat.com&amp;gt; - 0.3.33-1
- Update to 0.3.33
  Resolves: RHEL-194533

Mon, 07 Jul 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-2
- Re-include openblas.pc
- Resolves: RHEL-72679

Wed, 09 Apr 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-1
- Update to 0.3.29
- Resolves: RHEL-82829

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openblas-threads-0.3.33-1.el10.aarch64</title>
      <pubDate>Wed, 05 Aug 2026 12:33:46 PM GMT</pubDate>
      <guid isPermaLink="false">4c9231c7aa6c528d4133c818da076e2f4971e99267534007d4b9b113be3798cb</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/openblas-threads-0.3.33-1.el10.aarch64.rpm</link>
      <description><p><strong>openblas-threads</strong> - An optimized BLAS library based on GotoBLAS2, pthreads version&lt;br /&gt;</p>

<p>&lt;br /&gt;
OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD&lt;br /&gt;
version. The project is supported by the Lab of Parallel Software and&lt;br /&gt;
Computational Science, ISCAS. http://www.rdcps.ac.cn&lt;br /&gt;
&lt;br /&gt;
This package contains the library compiled with threading support and&lt;br /&gt;
a 32-bit integer interface.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 05 Aug 2026 GMT - Siteshwar Vashisht &amp;lt;svashisht@redhat.com&amp;gt; - 0.3.33-1
- Update to 0.3.33
  Resolves: RHEL-194533

Mon, 07 Jul 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-2
- Re-include openblas.pc
- Resolves: RHEL-72679

Wed, 09 Apr 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-1
- Update to 0.3.29
- Resolves: RHEL-82829

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openblas-static-0.3.33-1.el10.aarch64</title>
      <pubDate>Wed, 05 Aug 2026 12:33:46 PM GMT</pubDate>
      <guid isPermaLink="false">ba3445830f20ff920795a3d9240cbf3b3eca27994759a81fb521f436b301b187</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/openblas-static-0.3.33-1.el10.aarch64.rpm</link>
      <description><p><strong>openblas-static</strong> - Static version of OpenBLAS&lt;br /&gt;</p>

<p>&lt;br /&gt;
OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD&lt;br /&gt;
version. The project is supported by the Lab of Parallel Software and&lt;br /&gt;
Computational Science, ISCAS. http://www.rdcps.ac.cn&lt;br /&gt;
&lt;br /&gt;
This package contains the static libraries.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 05 Aug 2026 GMT - Siteshwar Vashisht &amp;lt;svashisht@redhat.com&amp;gt; - 0.3.33-1
- Update to 0.3.33
  Resolves: RHEL-194533

Mon, 07 Jul 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-2
- Re-include openblas.pc
- Resolves: RHEL-72679

Wed, 09 Apr 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-1
- Update to 0.3.29
- Resolves: RHEL-82829

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openblas-serial64_-0.3.33-1.el10.aarch64</title>
      <pubDate>Wed, 05 Aug 2026 12:33:46 PM GMT</pubDate>
      <guid isPermaLink="false">acad3033e6ce98d68d378750f7bd00c1c280a40da430b023ef895379ebed9eaf</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/openblas-serial64_-0.3.33-1.el10.aarch64.rpm</link>
      <description><p><strong>openblas-serial64_</strong> - An optimized BLAS library based on GotoBLAS2, serial version&lt;br /&gt;</p>

<p>&lt;br /&gt;
OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD&lt;br /&gt;
version. The project is supported by the Lab of Parallel Software and&lt;br /&gt;
Computational Science, ISCAS. http://www.rdcps.ac.cn&lt;br /&gt;
&lt;br /&gt;
This package contains the sequential library compiled with a 64-bit&lt;br /&gt;
integer interface and a symbol name suffix.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 05 Aug 2026 GMT - Siteshwar Vashisht &amp;lt;svashisht@redhat.com&amp;gt; - 0.3.33-1
- Update to 0.3.33
  Resolves: RHEL-194533

Mon, 07 Jul 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-2
- Re-include openblas.pc
- Resolves: RHEL-72679

Wed, 09 Apr 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-1
- Update to 0.3.29
- Resolves: RHEL-82829

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openblas-serial64-0.3.33-1.el10.aarch64</title>
      <pubDate>Wed, 05 Aug 2026 12:33:46 PM GMT</pubDate>
      <guid isPermaLink="false">7d7d5cbb721022eab1fdf2add4dbd87bb10757af0c966dc8574b817dc7b13ebf</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/openblas-serial64-0.3.33-1.el10.aarch64.rpm</link>
      <description><p><strong>openblas-serial64</strong> - An optimized BLAS library based on GotoBLAS2, serial version&lt;br /&gt;</p>

<p>&lt;br /&gt;
OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD&lt;br /&gt;
version. The project is supported by the Lab of Parallel Software and&lt;br /&gt;
Computational Science, ISCAS. http://www.rdcps.ac.cn&lt;br /&gt;
&lt;br /&gt;
This package contains the sequential library compiled with a 64-bit&lt;br /&gt;
integer interface.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 05 Aug 2026 GMT - Siteshwar Vashisht &amp;lt;svashisht@redhat.com&amp;gt; - 0.3.33-1
- Update to 0.3.33
  Resolves: RHEL-194533

Mon, 07 Jul 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-2
- Re-include openblas.pc
- Resolves: RHEL-72679

Wed, 09 Apr 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-1
- Update to 0.3.29
- Resolves: RHEL-82829

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openblas-openmp64_-0.3.33-1.el10.aarch64</title>
      <pubDate>Wed, 05 Aug 2026 12:33:46 PM GMT</pubDate>
      <guid isPermaLink="false">69435ffadc8147a6094cb8d38ecf41f745ab6bf3b5451ba380ba3174f5b491bb</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/openblas-openmp64_-0.3.33-1.el10.aarch64.rpm</link>
      <description><p><strong>openblas-openmp64_</strong> - An optimized BLAS library based on GotoBLAS2, OpenMP version&lt;br /&gt;</p>

<p>&lt;br /&gt;
OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD&lt;br /&gt;
version. The project is supported by the Lab of Parallel Software and&lt;br /&gt;
Computational Science, ISCAS. http://www.rdcps.ac.cn&lt;br /&gt;
&lt;br /&gt;
This package contains the library compiled with OpenMP support and&lt;br /&gt;
64-bit integer interface and a symbol name suffix.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 05 Aug 2026 GMT - Siteshwar Vashisht &amp;lt;svashisht@redhat.com&amp;gt; - 0.3.33-1
- Update to 0.3.33
  Resolves: RHEL-194533

Mon, 07 Jul 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-2
- Re-include openblas.pc
- Resolves: RHEL-72679

Wed, 09 Apr 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-1
- Update to 0.3.29
- Resolves: RHEL-82829

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openblas-devel-0.3.33-1.el10.aarch64</title>
      <pubDate>Wed, 05 Aug 2026 12:33:46 PM GMT</pubDate>
      <guid isPermaLink="false">e8a8c173e691eb87bb0ac36d8427f209c504455cc74dc430ece979340350312c</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/openblas-devel-0.3.33-1.el10.aarch64.rpm</link>
      <description><p><strong>openblas-devel</strong> - Development headers and libraries for OpenBLAS&lt;br /&gt;</p>

<p>&lt;br /&gt;
OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD&lt;br /&gt;
version. The project is supported by the Lab of Parallel Software and&lt;br /&gt;
Computational Science, ISCAS. http://www.rdcps.ac.cn&lt;br /&gt;
&lt;br /&gt;
This package contains the development headers and libraries.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 05 Aug 2026 GMT - Siteshwar Vashisht &amp;lt;svashisht@redhat.com&amp;gt; - 0.3.33-1
- Update to 0.3.33
  Resolves: RHEL-194533

Mon, 07 Jul 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-2
- Re-include openblas.pc
- Resolves: RHEL-72679

Wed, 09 Apr 2025 GMT - Pavel Simovec &amp;lt;psimovec@redhat.com&amp;gt; - 0.3.29-1
- Update to 0.3.29
- Resolves: RHEL-82829

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ipset-devel-7.22-13.el10.aarch64</title>
      <pubDate>Tue, 04 Aug 2026 12:27:31 PM GMT</pubDate>
      <guid isPermaLink="false">4b6e3c770956606a68a9d6803bafd5ad726d1ec95abb601c75a99b1c43cbe9f3</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/ipset-devel-7.22-13.el10.aarch64.rpm</link>
      <description><p><strong>ipset-devel</strong> - Development files for ipset&lt;br /&gt;</p>

<p>This package contains the files required to develop software using the ipset&lt;br /&gt;
libraries.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 04 Aug 2026 GMT - Phil Sutter &amp;lt;psutter@redhat.com&amp;gt; - 7.22-13
- Simplify Recommends again, kernel fixed Provides in modules-core packages

Thu, 11 Jun 2026 GMT - Phil Sutter &amp;lt;psutter@redhat.com&amp;gt; - 7.22-12
- avoid pulling in kernel package if not needed

Wed, 27 May 2026 GMT - Phil Sutter &amp;lt;psutter@redhat.com&amp;gt; - 7.22-11
- spec: Soft-depend on kernel-modules-extra

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-ldns-1.8.3-19.el10.aarch64</title>
      <pubDate>Tue, 04 Aug 2026 09:10:54 AM GMT</pubDate>
      <guid isPermaLink="false">4555b82c5333ea5dd6c2a7166e98423fdfa76ab2bb185852fdc49432f7c9d545</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/python3-ldns-1.8.3-19.el10.aarch64.rpm</link>
      <description><p><strong>python3-ldns</strong> - Python3 extensions for ldns&lt;br /&gt;</p>

<p>Python3 extensions for ldns</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 04 Aug 2026 GMT - Fedor Vorobev &amp;lt;fvorobev@redhat.com&amp;gt; - 1.8.3-19
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210693)

Tue, 29 Oct 2024 GMT - Jitka Plesnikova &amp;lt;jplesnik@redhat.com&amp;gt; - 1.8.3-18
- Fix for SWIG 4.3.0

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.8.3-17
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ldns-utils-1.8.3-19.el10.aarch64</title>
      <pubDate>Tue, 04 Aug 2026 09:10:54 AM GMT</pubDate>
      <guid isPermaLink="false">da643254fb76984a6bcd24b148fa9338e6e196083631e234331525ca433cbf0e</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/ldns-utils-1.8.3-19.el10.aarch64.rpm</link>
      <description><p><strong>ldns-utils</strong> - DNS(SEC) utilities for querying dns&lt;br /&gt;</p>

<p>Collection of tools to get, check or alter DNS(SEC) data.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 04 Aug 2026 GMT - Fedor Vorobev &amp;lt;fvorobev@redhat.com&amp;gt; - 1.8.3-19
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210693)

Tue, 29 Oct 2024 GMT - Jitka Plesnikova &amp;lt;jplesnik@redhat.com&amp;gt; - 1.8.3-18
- Fix for SWIG 4.3.0

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.8.3-17
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ldns-doc-1.8.3-19.el10.noarch</title>
      <pubDate>Tue, 04 Aug 2026 09:10:54 AM GMT</pubDate>
      <guid isPermaLink="false">963077a344f31d7fc5864e03f8ff4515aa3b7c09e723774b57b75e1c9bfe7550</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/ldns-doc-1.8.3-19.el10.noarch.rpm</link>
      <description><p><strong>ldns-doc</strong> - Documentation for the ldns library&lt;br /&gt;</p>

<p>This package contains documentation for the ldns library</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 04 Aug 2026 GMT - Fedor Vorobev &amp;lt;fvorobev@redhat.com&amp;gt; - 1.8.3-19
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210693)

Tue, 29 Oct 2024 GMT - Jitka Plesnikova &amp;lt;jplesnik@redhat.com&amp;gt; - 1.8.3-18
- Fix for SWIG 4.3.0

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.8.3-17
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ldns-devel-1.8.3-19.el10.aarch64</title>
      <pubDate>Tue, 04 Aug 2026 09:10:54 AM GMT</pubDate>
      <guid isPermaLink="false">9be17be894848669d37a7d9a81c23fefba68386e860a10cb4bafc753fef59fd2</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/ldns-devel-1.8.3-19.el10.aarch64.rpm</link>
      <description><p><strong>ldns-devel</strong> - Development package that includes the ldns header files&lt;br /&gt;</p>

<p>The devel package contains the ldns library and the include files</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 04 Aug 2026 GMT - Fedor Vorobev &amp;lt;fvorobev@redhat.com&amp;gt; - 1.8.3-19
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210693)

Tue, 29 Oct 2024 GMT - Jitka Plesnikova &amp;lt;jplesnik@redhat.com&amp;gt; - 1.8.3-18
- Fix for SWIG 4.3.0

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.8.3-17
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>perl-ldns-1.8.3-19.el10.aarch64</title>
      <pubDate>Tue, 04 Aug 2026 09:10:54 AM GMT</pubDate>
      <guid isPermaLink="false">72e973d14e7d4f4608e89eb0b2c3fe150b4928c124d98b5e896197ec5c648226</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/perl-ldns-1.8.3-19.el10.aarch64.rpm</link>
      <description><p><strong>perl-ldns</strong> - Perl extensions for ldns&lt;br /&gt;</p>

<p>Perl extensions for ldns</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 04 Aug 2026 GMT - Fedor Vorobev &amp;lt;fvorobev@redhat.com&amp;gt; - 1.8.3-19
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210693)

Tue, 29 Oct 2024 GMT - Jitka Plesnikova &amp;lt;jplesnik@redhat.com&amp;gt; - 1.8.3-18
- Fix for SWIG 4.3.0

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.8.3-17
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libnfsidmap-devel-1:2.8.3-9.el10.aarch64</title>
      <pubDate>Mon, 03 Aug 2026 05:57:53 PM GMT</pubDate>
      <guid isPermaLink="false">a3b80a83975c5573a0efb05f4a8faaa486d6e21868478d93d2d0f78aca5fdce2</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libnfsidmap-devel-2.8.3-9.el10.aarch64.rpm</link>
      <description><p><strong>libnfsidmap-devel</strong> - Development files for the libnfsidmap library&lt;br /&gt;</p>

<p>This package includes header files and libraries necessary for&lt;br /&gt;
developing programs which use the libnfsidmap library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 03 Aug 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-9
- nfsd: don't assume service is running when setting thread count to 0 (RHEL-174806)
- Pass ignore_hosts to export_create() in export_read() (RHEL-223703)

Wed, 01 Jul 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-8
- Ensure services are stopped when nfs-utils is uninstalled (RHEL-186341)

Mon, 06 Apr 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-7
- nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
- nfsrahead: zero-initialise device_info struct (RHEL-158528)
- nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nmstate-static-2.2.61-2.el10.aarch64</title>
      <pubDate>Mon, 03 Aug 2026 03:12:23 PM GMT</pubDate>
      <guid isPermaLink="false">aead88026f43294571611df3efc0649ac72ede86785eb3348e533ca5c272a6eb</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/nmstate-static-2.2.61-2.el10.aarch64.rpm</link>
      <description><p><strong>nmstate-static</strong> - Static development files for nmstate&lt;br /&gt;</p>

<p>Static C library bindings for nmstate.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 03 Aug 2026 GMT - Rahul Rajesh &amp;lt;rrajesh@redhat.com&amp;gt; - 2.2.61-2
- Fix copy-mac-from for down interfaces
- Fix copy-mac-from failing when source interface is down. RHEL-145074
- Fix OriginalName link match for stacked interfaces. RHEL-167955

Mon, 13 Jul 2026 GMT - Rahul Rajesh &amp;lt;rajeshrah22@gmail.com&amp;gt; - 2.2.61-1
- Upgrade to 2.2.61
- Support referring alt-name in `copy-mac-from` property. RHEL-145074
- Fix validation of conflicting routes in kernel mode. RHEL-124835
- Update GPG public key

Mon, 22 Jun 2026 GMT - Vladimír Beneš &amp;lt;vbenes@redhat.com&amp;gt; - 2.2.60-3
- Add smoke and upstream tier1 gating plans

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nmstate-devel-2.2.61-2.el10.aarch64</title>
      <pubDate>Mon, 03 Aug 2026 03:12:23 PM GMT</pubDate>
      <guid isPermaLink="false">827ee68fbbc16d4c6ca230736ce52a9159a486f82b3c374b07adcb91a1c5bb32</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/nmstate-devel-2.2.61-2.el10.aarch64.rpm</link>
      <description><p><strong>nmstate-devel</strong> - Development files for nmstate&lt;br /&gt;</p>

<p>Development files of nmstate C binding.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 03 Aug 2026 GMT - Rahul Rajesh &amp;lt;rrajesh@redhat.com&amp;gt; - 2.2.61-2
- Fix copy-mac-from for down interfaces
- Fix copy-mac-from failing when source interface is down. RHEL-145074
- Fix OriginalName link match for stacked interfaces. RHEL-167955

Mon, 13 Jul 2026 GMT - Rahul Rajesh &amp;lt;rajeshrah22@gmail.com&amp;gt; - 2.2.61-1
- Upgrade to 2.2.61
- Support referring alt-name in `copy-mac-from` property. RHEL-145074
- Fix validation of conflicting routes in kernel mode. RHEL-124835
- Update GPG public key

Mon, 22 Jun 2026 GMT - Vladimír Beneš &amp;lt;vbenes@redhat.com&amp;gt; - 2.2.60-3
- Add smoke and upstream tier1 gating plans

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>flatpak-devel-1.18.0-2.el10.aarch64</title>
      <pubDate>Mon, 03 Aug 2026 02:08:27 PM GMT</pubDate>
      <guid isPermaLink="false">32756d54ddd259711d7f4287be4adc6365db7596c8a87e0d76e345d60629e261</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/flatpak-devel-1.18.0-2.el10.aarch64.rpm</link>
      <description><p><strong>flatpak-devel</strong> - Development files for flatpak&lt;br /&gt;</p>

<p>This package contains the pkg-config file and development headers for flatpak.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 30 Jul 2026 GMT - Luigi Pavan &amp;lt;lpavan@redhat.com&amp;gt; - 1.18.0-2
- Don't set no_interaction for --assumeyes
  Resolves: RHEL-223434

Thu, 11 Jun 2026 GMT - Jan Grulich &amp;lt;jgrulich@redhat.com&amp;gt; - 1.18.0-1
- Update to 1.18.0
  Resolves: RHEL-126038
  Resolves: RHEL-92123
  Resolves: RHEL-165631
  Resolves: RHEL-170158

Tue, 17 Mar 2026 GMT - Jan Grulich &amp;lt;jgrulich@redhat.com&amp;gt; - 1.17.3-1
- 1.17.3
  Resolves: RHEL-126038

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-ipatests-4.13.2-2.el10.noarch</title>
      <pubDate>Mon, 03 Aug 2026 11:14:47 AM GMT</pubDate>
      <guid isPermaLink="false">07cd11046bf51bb5da15558d55f14081af50875a3b3994ec38f360e9400f5317</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/python3-ipatests-4.13.2-2.el10.noarch.rpm</link>
      <description><p><strong>python3-ipatests</strong> - IPA tests and test tools&lt;br /&gt;</p>

<p>IPA is an integrated solution to provide centrally managed Identity (users,&lt;br /&gt;
hosts, services), Authentication (SSO, 2FA), and Authorization&lt;br /&gt;
(host access control, SELinux user roles, services). The solution provides&lt;br /&gt;
features for further integration with Linux based clients (SUDO, automount)&lt;br /&gt;
and integration with Active Directory based infrastructures (Trusts).&lt;br /&gt;
This package contains tests that verify IPA functionality under Python 3.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 03 Aug 2026 GMT - Florence Blanc-Renaud &amp;lt;flo@redhat.com&amp;gt; - 4.13.2-2
- Resolves: RHEL-222810  ipa-server-trust-ad package installation failing for samba dependency

Thu, 16 Jul 2026 GMT - Florence Blanc-Renaud &amp;lt;flo@redhat.com&amp;gt; - 4.13.2-1
- Resolves: RHEL-178898 Rebase ipa to latest version for RHEL 10.3
- Resolves: RHEL-179217 ipa-migrate tool is renaming host records &amp;amp; host info in automount information
- Resolves: RHEL-178538 [Cursor Automated] Include latest fixes in python3-ipatests package
- Resolves: RHEL-174346 Release Modern UI progress to RHEL 10.3
- Resolves: RHEL-153857 ipa-migrate doesn't properly handle replication conflicts
- Resolves: RHEL-153852 ipa-migrate doesn't migrate IPA locations
- Resolves: RHEL-151578 Extend SELinux policy to allow use of SSSD authentication helpers on non-enrolled hosts
- Resolves: RHEL-151326 freeipa-client %triggerin and %post can fail (rpm scriptlets should never fail, by policy)
- Resolves: RHEL-147173 ipa-migrate doesn't process users' sshpublickeys
- Resolves: RHEL-107899 [RFE] X-Content-Type-Options header in IdM WebUI
- Resolves: RHEL-107897 [RFE] Implement Referrer-Policy on IdM WebUI
- Resolves: RHEL-107045 [RFE] CSP not implemented in IdM WebUI
- Resolves: RHEL-105139 IPA compatibility with tomcat 10
- Resolves: RHEL-103492 ipalockout_postop is incorrectly warning about locked user
- Resolves: RHEL-70229 To add "SameSite" flag to ipa_session cookies
- Resolves: RHEL-29029 Webui 3007 Requirement error "userCertificate" is required (not allowing certificate manage
- Resolves: RHEL-154589 FreeIPA JSON-RPC CSRF Referer Validation Uses Naive Prefix Match

Tue, 02 Jun 2026 GMT - Florence Blanc-Renaud &amp;lt;flo@redhat.com&amp;gt; - 4.13.1-4
- Related: RHEL-175123 Rebuilt for samba

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dovecot-devel-1:2.3.21-21.el10.aarch64</title>
      <pubDate>Mon, 03 Aug 2026 08:59:13 AM GMT</pubDate>
      <guid isPermaLink="false">471f4f77a776d9ed2dddd699ea779f2d19eac9bea6587c4360cddf995c5bb0b2</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/dovecot-devel-2.3.21-21.el10.aarch64.rpm</link>
      <description><p><strong>dovecot-devel</strong> - Development files for dovecot&lt;br /&gt;</p>

<p>This package provides the development files for dovecot.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 03 Aug 2026 GMT - Michal Hlavinka &amp;lt;mhlavink@redhat.com&amp;gt; - 1:2.3.21-21
- increase SASL auth buffer size for large Kerberos tickets (RHEL-155444)

Tue, 21 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 1:2.3.21-20
- fix CVE-2026-42006: fix imap_parser list_count_limit to actually
  work (RHEL-188469)

Mon, 11 May 2026 GMT - Michal Hlavinka &amp;lt;mhlavink@redhat.com&amp;gt; - 1:2.3.21-19
- update release for rebuild

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>edk2-tools-doc-20260221-6.el10.noarch</title>
      <pubDate>Mon, 03 Aug 2026 06:53:53 AM GMT</pubDate>
      <guid isPermaLink="false">d58255fa5a8b18cbda4e9e5deace9a083ef1e9632978661378a328896daea06a</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/edk2-tools-doc-20260221-6.el10.noarch.rpm</link>
      <description><p><strong>edk2-tools-doc</strong> - Documentation for EFI Development Kit II Tools&lt;br /&gt;</p>

<p>This package documents the tools that are needed to&lt;br /&gt;
build EFI executables and ROMs using the GNU tools.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 03 Aug 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20260221-6
- edk2-OvmfPkg-EmuVariableFvbRuntimeDxe-fix-ValidateFvHeade.patch [RHEL-220548]
- Resolves: RHEL-220548
  ([RHEL 10.3] TDX Secure Boot Setup Mode with OVMF.inteltdx.secboot.fd)

Thu, 09 Jul 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20260221-5
- edk2-update-dbx-to-20260630-v1.6.5.patch [RHEL-193127]
- Resolves: RHEL-193127
  ([edk2] update dbx database to release 1.6.5)

Thu, 25 Jun 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20260221-4
- edk2-Revert-MdeModulePkg-PciBusDxe-Degrade-MEM64-to-PMEM6.patch [RHEL-188305]
- Resolves: RHEL-188305
  ([edk2,rhel-10] Unable to allocate PCI BAR with edk2-20260221-1.el10)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>edk2-tools-20260221-6.el10.aarch64</title>
      <pubDate>Mon, 03 Aug 2026 06:53:53 AM GMT</pubDate>
      <guid isPermaLink="false">3e56e939fdb237a352e236231ad2e88bbe259b8b1dcfa7a76f92d300794e8e4c</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/edk2-tools-20260221-6.el10.aarch64.rpm</link>
      <description><p><strong>edk2-tools</strong> - EFI Development Kit II Tools&lt;br /&gt;</p>

<p>This package provides tools that are needed to&lt;br /&gt;
build EFI executables and ROMs using the GNU tools.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 03 Aug 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20260221-6
- edk2-OvmfPkg-EmuVariableFvbRuntimeDxe-fix-ValidateFvHeade.patch [RHEL-220548]
- Resolves: RHEL-220548
  ([RHEL 10.3] TDX Secure Boot Setup Mode with OVMF.inteltdx.secboot.fd)

Thu, 09 Jul 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20260221-5
- edk2-update-dbx-to-20260630-v1.6.5.patch [RHEL-193127]
- Resolves: RHEL-193127
  ([edk2] update dbx database to release 1.6.5)

Thu, 25 Jun 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20260221-4
- edk2-Revert-MdeModulePkg-PciBusDxe-Degrade-MEM64-to-PMEM6.patch [RHEL-188305]
- Resolves: RHEL-188305
  ([edk2,rhel-10] Unable to allocate PCI BAR with edk2-20260221-1.el10)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>edk2-ovmf-20260221-6.el10.noarch</title>
      <pubDate>Mon, 03 Aug 2026 06:53:50 AM GMT</pubDate>
      <guid isPermaLink="false">d54181a02e6fefe2657758e140438a7216151e7f13e287bc3fac1db37c59eca1</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/edk2-ovmf-20260221-6.el10.noarch.rpm</link>
      <description><p><strong>edk2-ovmf</strong> - UEFI firmware for x86_64 virtual machines&lt;br /&gt;</p>

<p>OVMF (Open Virtual Machine Firmware) is a project to enable UEFI support for&lt;br /&gt;
Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU&lt;br /&gt;
and KVM.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 03 Aug 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20260221-6
- edk2-OvmfPkg-EmuVariableFvbRuntimeDxe-fix-ValidateFvHeade.patch [RHEL-220548]
- Resolves: RHEL-220548
  ([RHEL 10.3] TDX Secure Boot Setup Mode with OVMF.inteltdx.secboot.fd)

Thu, 09 Jul 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20260221-5
- edk2-update-dbx-to-20260630-v1.6.5.patch [RHEL-193127]
- Resolves: RHEL-193127
  ([edk2] update dbx database to release 1.6.5)

Thu, 25 Jun 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20260221-4
- edk2-Revert-MdeModulePkg-PciBusDxe-Degrade-MEM64-to-PMEM6.patch [RHEL-188305]
- Resolves: RHEL-188305
  ([edk2,rhel-10] Unable to allocate PCI BAR with edk2-20260221-1.el10)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-headless-fastdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">dcbcf73a93534602955a7df2588216d3947cbfe91264fd0cad6f62e77cc663f4</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-headless-fastdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-headless-fastdebug</strong> - OpenJDK 21 Runtime Environment optimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 21 runtime environment without audio and video support.&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-fastdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">f5a45e66ed1047b6a4b24794a51d947aab6cda1a8ff6e9dbbe3a13f5779ffe64</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-fastdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-fastdebug</strong> - OpenJDK 21 Runtime Environment optimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 21 runtime environment.&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-devel-slowdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">406b094a63d9f5fa6ae9bb2d424b94ebfda70546996bcbe676c50106bbfbcd44</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-devel-slowdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-devel-slowdebug</strong> - OpenJDK 21 Development Environment unoptimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 21 development tools.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-devel-fastdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">6e2dc20f668be23867a3e112adef387f63a6de212b9ba1a5a5ac07b02a50bab9</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-devel-fastdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-devel-fastdebug</strong> - OpenJDK 21 Development Environment optimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 21 development tools              .&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-demo-slowdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">cc8ab522820efb30e7306d18e7ca1ba534528da5d408c7364239e06a3d078603</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-demo-slowdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-demo-slowdebug</strong> - OpenJDK 21 Demos unoptimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 21 demos.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-demo-fastdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">07f634a68baa84f179a6cf9906ef72f6697c1abafa70292c408950aa178b883c</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-demo-fastdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-demo-fastdebug</strong> - OpenJDK 21 Demos optimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 21 demos.&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-static-libs-slowdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">c93c0c46d1d4c3460207294a099f6fd25d07ba0efaf313deebe821e769aa594b</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-static-libs-slowdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-static-libs-slowdebug</strong> - OpenJDK 21 libraries for static linking unoptimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 21 libraries for static linking.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-static-libs-fastdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">948d3ad5b65252a1fdb2d88d9280a77ade8b5cb532db2ee4174014bd9835f1aa</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-static-libs-fastdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-static-libs-fastdebug</strong> - OpenJDK 21 libraries for static linking optimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 21 libraries for static linking.&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-src-slowdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">71c5c8ead6008a7baea5fc16526ab74565ce3756ce8a96b2ef1a82f1d48b7dcf</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-src-slowdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-src-slowdebug</strong> - OpenJDK 21 Source Bundle for packages with debugging on and no optimisation&lt;br /&gt;</p>

<p>The java-21-openjdk-src-slowdebug sub-package contains the complete OpenJDK 21&lt;br /&gt;
 class library source code for use by IDE indexers and debuggers, for packages with debugging on and no optimisation.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-src-fastdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">cac08659246a1cda4b777942716b64a2e9352ff3f23b740cf6ef6c5e4090c431</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-src-fastdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-src-fastdebug</strong> - OpenJDK 21 Source Bundle for packages with debugging on and optimisation&lt;br /&gt;</p>

<p>The java-21-openjdk-src-fastdebug sub-package contains the complete OpenJDK 21&lt;br /&gt;
 class library source code for use by IDE indexers and debuggers, for packages with debugging on and optimisation.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-slowdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">b4bccfff5b8c6dab5d485cee4b9a71db5521810898ce6b528b94039658c5a637</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-slowdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-slowdebug</strong> - OpenJDK 21 Runtime Environment unoptimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 21 runtime environment.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-jmods-slowdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">23db61a889578d079b2b7ee67bd13a2fb2f87db1f162ead4d0b8319946c6e0b2</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-jmods-slowdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-jmods-slowdebug</strong> - JMods for OpenJDK 21 unoptimised with full debugging on&lt;br /&gt;</p>

<p>The JMods for OpenJDK 21.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-jmods-fastdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">4b1dcd40c9553a3ae0f232e1cff5f32871d28e3b78830b5e5d2d187191821fac</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-jmods-fastdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-jmods-fastdebug</strong> - JMods for OpenJDK 21 optimised with full debugging on&lt;br /&gt;</p>

<p>The JMods for OpenJDK 21.&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-21-openjdk-headless-slowdebug-1:21.0.12.0.8-2.1.el10.aarch64</title>
      <pubDate>Sat, 01 Aug 2026 12:25:29 AM GMT</pubDate>
      <guid isPermaLink="false">ed943e2c61f1c1cc774263f2616a59f0684ac1168f52f2529560e717d4c1ae94</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-21-openjdk-headless-slowdebug-21.0.12.0.8-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-21-openjdk-headless-slowdebug</strong> - OpenJDK 21 Runtime Environment unoptimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 21 runtime environment without audio and video support.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

Sat, 18 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:21.0.12.0.8-1.1
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp;amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cryptsetup-devel-2.8.6-2.el10.aarch64</title>
      <pubDate>Fri, 31 Jul 2026 09:35:45 AM GMT</pubDate>
      <guid isPermaLink="false">4e35ed7aa86a7b664e5911e96d2f4f9f43ffebdc549924e3e866368c96422976</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/cryptsetup-devel-2.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>cryptsetup-devel</strong> - Headers and libraries for using encrypted file systems&lt;br /&gt;</p>

<p>The cryptsetup-devel package contains libraries and header files&lt;br /&gt;
used for writing code that makes use of disk encryption.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 30 Jul 2026 GMT - Ondrej Kozina &amp;lt;okozina@redhat.com&amp;gt; - 2.8.6-2
- patch: load volume keys in an intermediary keyring linked in the thread keyring.
- patch: reinstate few skipped tests due to missing crypto-check test utility.
- Resolves: 193162

Fri, 08 May 2026 GMT - Kristina Hanicova &amp;lt;khanicov@redhat.com&amp;gt; - 2.8.6-1
- Update to cryptsetup 2.8.6.
- patch: ci: Replace jq with bash wrapper.
- patch: ci: Fix jq no longer handling 0x00 characters.
- patch: reencrypt: update internal reencryption error state descriptions.
- patch: reencrypt: merge REENC_ERR and REENC_ROLLBACK errors in one.
- patch: reencrypt: better name error values to match the description.
- patch: reencrypt: refactor overlay devices teardown.
- patch: reencrypt: add more gracefull reencryption error path.
- patch: tests: Add reencryption error path tests.
- Resolves: 163434

Fri, 09 Jan 2026 GMT - Kristina Hanicova &amp;lt;khanicov@redhat.com&amp;gt; - 2.8.1-2
- patch: opal: Submit PSID reset command to R/W file descriptor.
- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122285 RHEL-125150 RHEL-125155 RHEL-125166 RHEL-132584 RHEL-140107

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>389-ds-base-devel-3.3.0-2.el10.aarch64</title>
      <pubDate>Thu, 30 Jul 2026 08:33:53 PM GMT</pubDate>
      <guid isPermaLink="false">fe9ac2f7e4da394de5c34d0f2aee7b246332457cdacfaf67a408607ff0635638</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/389-ds-base-devel-3.3.0-2.el10.aarch64.rpm</link>
      <description><p><strong>389-ds-base-devel</strong> - Development libraries for 389 Directory Server (base)&lt;br /&gt;</p>

<p>Development Libraries and headers for the 389 Directory Server base package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 30 Jul 2026 GMT - Simon Pichugin &amp;lt;spichugi@redhat.com&amp;gt; - 3.3.0-2
- Bump version to 3.3.0-2
- Resolves: RHEL-146147 - Fix dsconf to allow specifying multiple
  certificates for use in 389-ds server
- Resolves: RHEL-182463 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file'
- Resolves: RHEL-166737 - import_monitor_threads and average rate
  214748364.8/sec rate calculation issue
- Resolves: RHEL-153372 - dirsrv@.service missing NoNewPrivileges and
  MemoryDenyWriteExecute despite broad capability set
- Resolves: RHEL-164610 - Online reinitialization is failing with the
  supplier being busy calling idrange_add_id()
- Resolves: RHEL-153094 - [RFE] Thread pool state mmap file with dsctl and
  cn=monitor exposure
- Resolves: RHEL-129204 - Local password policies can be created with
  unallowed values
- Resolves: RHEL-185139 - Compressed logs are prematurely deleted
- Resolves: RHEL-183383 - Post-import cache autotuning does not recompute
  entry cache size
- Resolves: RHEL-190780 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
  pointer dereference in defer control plugin BER parser [rhel-10.3]
- Resolves: RHEL-183109 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.3]

Fri, 05 Jun 2026 GMT - Viktor Ashirov &amp;lt;vashirov@redhat.com&amp;gt; - 3.3.0-1
- Bump version to 3.3.0
- Resolves: RHEL-58681 - high wtime can hide a worker reading a large
  requests
- Resolves: RHEL-62876 - Inconsistencies in the log messages
- Resolves: RHEL-68692 - Replication halt caused by an incorrect setting of
  "nsslapd-changelogmaxage"
- Resolves: RHEL-76836 - Crash in replica_config_add when manually
  configuring a replica with an incorrect nsds5ReplicaRoot.
- Resolves: RHEL-80256 - [RFE] RHDS healthcheck tool could provide more
  information in offline mode
- Resolves: RHEL-84531 - access log - suspicious wtime  optime negative and
  large values in internal op
- Resolves: RHEL-86325 - dbscan utility not filtering using -k option
- Resolves: RHEL-88942 - LDAP healthcheck and ignoring entrydn index and
  associated config
- Resolves: RHEL-109505 - Possible memory leak when using the Retro
  Changelog plugin.
- Resolves: RHEL-117666 - [RFE] Expose stats from deferred memberof
- Resolves: RHEL-118811 - Password policy can be created even though the
  same one already exists
- Resolves: RHEL-118867 - Memory leak issue in an IPA deployment.
- Resolves: RHEL-121119 - Differences on export ldif using online of off-
  line method on RHDS
- Resolves: RHEL-121169 - dsctl should report error when the ldif to import
  doesn't have permissions to be read by dirsrv.
- Resolves: RHEL-129204 - Local password policies can be created with
  unallowed values
- Resolves: RHEL-129597 - Remediate "Could not read password attribute"
  error on directory Servers with chaining enabled(DBLink)
- Resolves: RHEL-132767 - An online reinitialization with LMDB is
  terminating the receiving server
- Resolves: RHEL-134188 - RFE: add server-side configuration to ignore
  malformed controls and/or override critical controls from clients
- Resolves: RHEL-138569 - AddressSanitizer: SEGV
  ldap/servers/plugins/automember/automember.c:1962 in
  automember_mod_post_op
- Resolves: RHEL-140005 - Memory leaks in IPA context on server restart
- Resolves: RHEL-141049 - Fail open condition in ACL
- Resolves: RHEL-141480 - [RFE] Add shadowLastChange fixup task
- Resolves: RHEL-146147 - Fix dsconf to allow specifying multiple
  certificates for use in 389-ds server
- Resolves: RHEL-149125 - dnaSharedConfig: "dnaPortNum: 0"
- Resolves: RHEL-151246 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend
- Resolves: RHEL-152373 - Entry cache DN hash table corruption causes
  SIGSEGV in ns-slapd
- Resolves: RHEL-153088 - [RFE] Add OS-level thread names to all server
  threads
- Resolves: RHEL-153089 - [RFE] Add work queue metrics to cn=monitor
- Resolves: RHEL-153092 - [RFE] Per-operation thread pool context via STAT
  extension
- Resolves: RHEL-153372 - dirsrv@.service missing NoNewPrivileges and
  MemoryDenyWriteExecute despite broad capability set
- Resolves: RHEL-154374 - Prevent the ability of creating a replication
  agreement from a node back to itself is needed
- Resolves: RHEL-154380 - DS 12 does not handle escape char in bind user
- Resolves: RHEL-157894 - Online export is failing when using the option
  "-s"
- Resolves: RHEL-163373 - WARN - keys2idl - received NULL idl from
  index_read_ext_allids
- Resolves: RHEL-165956 - can't modify user's name/dn if it's owner of
  SubIDs
- Resolves: RHEL-169529 - Rebase 389-ds-base to 3.3.x
- Resolves: RHEL-170277 - Memory leaks in syncrepl plugin during persistent
  search operations
- Resolves: RHEL-170643 - passwordbadwords attribute of the local password
  policy is not functioning
- Resolves: RHEL-170907 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
- Resolves: RHEL-172228 - Replacing a group's member list modifies users
  who were already members
- Resolves: RHEL-174908 - Replication errors in logs
- Resolves: RHEL-181022 - Server shutdown during online reindex may lead to
  data loss

Thu, 05 Mar 2026 GMT - Viktor Ashirov &amp;lt;vashirov@redhat.com&amp;gt; - 3.2.0-6
- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>389-ds-base-bdb-3.3.0-2.el10.aarch64</title>
      <pubDate>Thu, 30 Jul 2026 08:33:53 PM GMT</pubDate>
      <guid isPermaLink="false">3f2aa2f069ddeee8e34aa5725ee358a30c2af0472d2d651a56fdf38942ec3bb2</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/389-ds-base-bdb-3.3.0-2.el10.aarch64.rpm</link>
      <description><p><strong>389-ds-base-bdb</strong> - Berkeley Database backend for 389 Directory Server&lt;br /&gt;</p>

<p>Berkeley Database backend for 389 Directory Server&lt;br /&gt;
Warning! This backend is deprecated in favor of lmdb and its support&lt;br /&gt;
may be removed in future versions.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 30 Jul 2026 GMT - Simon Pichugin &amp;lt;spichugi@redhat.com&amp;gt; - 3.3.0-2
- Bump version to 3.3.0-2
- Resolves: RHEL-146147 - Fix dsconf to allow specifying multiple
  certificates for use in 389-ds server
- Resolves: RHEL-182463 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file'
- Resolves: RHEL-166737 - import_monitor_threads and average rate
  214748364.8/sec rate calculation issue
- Resolves: RHEL-153372 - dirsrv@.service missing NoNewPrivileges and
  MemoryDenyWriteExecute despite broad capability set
- Resolves: RHEL-164610 - Online reinitialization is failing with the
  supplier being busy calling idrange_add_id()
- Resolves: RHEL-153094 - [RFE] Thread pool state mmap file with dsctl and
  cn=monitor exposure
- Resolves: RHEL-129204 - Local password policies can be created with
  unallowed values
- Resolves: RHEL-185139 - Compressed logs are prematurely deleted
- Resolves: RHEL-183383 - Post-import cache autotuning does not recompute
  entry cache size
- Resolves: RHEL-190780 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
  pointer dereference in defer control plugin BER parser [rhel-10.3]
- Resolves: RHEL-183109 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.3]

Fri, 05 Jun 2026 GMT - Viktor Ashirov &amp;lt;vashirov@redhat.com&amp;gt; - 3.3.0-1
- Bump version to 3.3.0
- Resolves: RHEL-58681 - high wtime can hide a worker reading a large
  requests
- Resolves: RHEL-62876 - Inconsistencies in the log messages
- Resolves: RHEL-68692 - Replication halt caused by an incorrect setting of
  "nsslapd-changelogmaxage"
- Resolves: RHEL-76836 - Crash in replica_config_add when manually
  configuring a replica with an incorrect nsds5ReplicaRoot.
- Resolves: RHEL-80256 - [RFE] RHDS healthcheck tool could provide more
  information in offline mode
- Resolves: RHEL-84531 - access log - suspicious wtime  optime negative and
  large values in internal op
- Resolves: RHEL-86325 - dbscan utility not filtering using -k option
- Resolves: RHEL-88942 - LDAP healthcheck and ignoring entrydn index and
  associated config
- Resolves: RHEL-109505 - Possible memory leak when using the Retro
  Changelog plugin.
- Resolves: RHEL-117666 - [RFE] Expose stats from deferred memberof
- Resolves: RHEL-118811 - Password policy can be created even though the
  same one already exists
- Resolves: RHEL-118867 - Memory leak issue in an IPA deployment.
- Resolves: RHEL-121119 - Differences on export ldif using online of off-
  line method on RHDS
- Resolves: RHEL-121169 - dsctl should report error when the ldif to import
  doesn't have permissions to be read by dirsrv.
- Resolves: RHEL-129204 - Local password policies can be created with
  unallowed values
- Resolves: RHEL-129597 - Remediate "Could not read password attribute"
  error on directory Servers with chaining enabled(DBLink)
- Resolves: RHEL-132767 - An online reinitialization with LMDB is
  terminating the receiving server
- Resolves: RHEL-134188 - RFE: add server-side configuration to ignore
  malformed controls and/or override critical controls from clients
- Resolves: RHEL-138569 - AddressSanitizer: SEGV
  ldap/servers/plugins/automember/automember.c:1962 in
  automember_mod_post_op
- Resolves: RHEL-140005 - Memory leaks in IPA context on server restart
- Resolves: RHEL-141049 - Fail open condition in ACL
- Resolves: RHEL-141480 - [RFE] Add shadowLastChange fixup task
- Resolves: RHEL-146147 - Fix dsconf to allow specifying multiple
  certificates for use in 389-ds server
- Resolves: RHEL-149125 - dnaSharedConfig: "dnaPortNum: 0"
- Resolves: RHEL-151246 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend
- Resolves: RHEL-152373 - Entry cache DN hash table corruption causes
  SIGSEGV in ns-slapd
- Resolves: RHEL-153088 - [RFE] Add OS-level thread names to all server
  threads
- Resolves: RHEL-153089 - [RFE] Add work queue metrics to cn=monitor
- Resolves: RHEL-153092 - [RFE] Per-operation thread pool context via STAT
  extension
- Resolves: RHEL-153372 - dirsrv@.service missing NoNewPrivileges and
  MemoryDenyWriteExecute despite broad capability set
- Resolves: RHEL-154374 - Prevent the ability of creating a replication
  agreement from a node back to itself is needed
- Resolves: RHEL-154380 - DS 12 does not handle escape char in bind user
- Resolves: RHEL-157894 - Online export is failing when using the option
  "-s"
- Resolves: RHEL-163373 - WARN - keys2idl - received NULL idl from
  index_read_ext_allids
- Resolves: RHEL-165956 - can't modify user's name/dn if it's owner of
  SubIDs
- Resolves: RHEL-169529 - Rebase 389-ds-base to 3.3.x
- Resolves: RHEL-170277 - Memory leaks in syncrepl plugin during persistent
  search operations
- Resolves: RHEL-170643 - passwordbadwords attribute of the local password
  policy is not functioning
- Resolves: RHEL-170907 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
- Resolves: RHEL-172228 - Replacing a group's member list modifies users
  who were already members
- Resolves: RHEL-174908 - Replication errors in logs
- Resolves: RHEL-181022 - Server shutdown during online reindex may lead to
  data loss

Thu, 05 Mar 2026 GMT - Viktor Ashirov &amp;lt;vashirov@redhat.com&amp;gt; - 3.2.0-6
- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>pcp-testsuite-7.1.5-4.el10.aarch64</title>
      <pubDate>Thu, 30 Jul 2026 01:08:29 PM GMT</pubDate>
      <guid isPermaLink="false">13449fecd34292cd63c7134f2b9f55a6264fde0eea82440cc0dc8fbf6fa429c2</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/pcp-testsuite-7.1.5-4.el10.aarch64.rpm</link>
      <description><p><strong>pcp-testsuite</strong> - Performance Co-Pilot (PCP) test suite&lt;br /&gt;</p>

<p>Quality assurance test suite for Performance Co-Pilot (PCP).</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 30 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 7.1.5-4
- Fix CVE-2026-16531: path traversal via hostname in pmproxy (RHEL-213756)

Thu, 30 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 7.1.5-3
- Fix arbitrary pointer deref in __pmLogLoadInDom (CVE-2026-16530) (RHEL-213746)

Wed, 17 Jun 2026 GMT - William Cohen &amp;lt;wcohen@redhat.com&amp;gt; - 7.1.5-2
- Remove pcp-pmda-bpftrace from pcp zeroconfig requires (RHEL-180384)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nftables-devel-1:1.1.5-6.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 01:08:40 PM GMT</pubDate>
      <guid isPermaLink="false">2ebadbb73ee45120876724bc100f293fb6e42d253895ca4d740d61911aa88e78</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/nftables-devel-1.1.5-6.el10.aarch64.rpm</link>
      <description><p><strong>nftables-devel</strong> - Development library for nftables / libnftables&lt;br /&gt;</p>

<p>Development tools and static libraries and header files for the libnftables library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - Phil Sutter &amp;lt;psutter@redhat.com&amp;gt; [1.1.5-6.el10]
- tests: Prepare exit codes for automake (Phil Sutter) [RHEL-179035]
- parser_json: fix map/set type confusion crash in map statement parser (Phil Sutter) [RHEL-179035]
- intervals: Fix for inconsistent union field use (Phil Sutter) [RHEL-179035]

Thu, 21 May 2026 GMT - Phil Sutter &amp;lt;psutter@redhat.com&amp;gt; [1.1.5-5.el10]
- Bump revision to overcome pipeline issues (Phil Sutter) [RHEL-128553]

Tue, 24 Feb 2026 GMT - Phil Sutter &amp;lt;psutter@redhat.com&amp;gt; [1.1.5-4.el10]
- spec: Require libnftnl-1.3.0-3 for nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
- tests: py: Adjust payloads to changed userdata printing (Phil Sutter) [RHEL-128553]
- tests: py: Update payload records (Phil Sutter) [RHEL-128553]
- tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-128553]
- tests: py: tools: Add regen_payloads.sh (Phil Sutter) [RHEL-128553]
- netlink: Make use of nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
- netlink: No need to reference array when passing as pointer (Phil Sutter) [RHEL-128553]
- netlink: Introduce struct nft_data_linearize::sizes (Phil Sutter) [RHEL-128553]
- netlink: Introduce struct nft_data_linearize::byteorder (Phil Sutter) [RHEL-128553]
- expression: Set range expression 'len' field (Phil Sutter) [RHEL-128553]
- intervals: Convert byte order implicitly (Phil Sutter) [RHEL-128553]
- mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-128553]
- mergesort: Fix sorting of string values (Phil Sutter) [RHEL-128553]
- segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-128553]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-static-libs-slowdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">07a8479184ec546878b1a47989d446f77ae791e4448c7f95946a02d9302cc328</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-static-libs-slowdebug</strong> - OpenJDK 25 libraries for static linking unoptimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 libraries for static linking.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-static-libs-fastdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">f05d29f01db8783a0626e4c3f0e4763ac051ba0c6107037b1aa79c63b2c08085</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-static-libs-fastdebug</strong> - OpenJDK 25 libraries for static linking optimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 libraries for static linking.&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-src-slowdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">18853d349ca05fedf564ea9ec92a49946f65747e58048e21957ca9c02ae6e7e2</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-src-slowdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-src-slowdebug</strong> - OpenJDK 25 Source Bundle for packages with debugging on and no optimisation&lt;br /&gt;</p>

<p>The java-25-openjdk-src-slowdebug sub-package contains the complete OpenJDK 25&lt;br /&gt;
 class library source code for use by IDE indexers and debuggers, for packages with debugging on and no optimisation.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-src-fastdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">174c0fc131fa8459620b34f152b6ffb82e20c26da0f884d43711e029941108ac</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-src-fastdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-src-fastdebug</strong> - OpenJDK 25 Source Bundle for packages with debugging on and optimisation&lt;br /&gt;</p>

<p>The java-25-openjdk-src-fastdebug sub-package contains the complete OpenJDK 25&lt;br /&gt;
 class library source code for use by IDE indexers and debuggers, for packages with debugging on and optimisation.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-slowdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">e0159e8ec3855c652105ad53cd1f93e4b6e636cb43632ad42d4f268ee42b4a56</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-slowdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-slowdebug</strong> - OpenJDK 25 Runtime Environment unoptimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 runtime environment.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-jmods-slowdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">7348009e523ce8094b1552061d48de08f5093cda3056c4d3b582fe7f731e75e6</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-jmods-slowdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-jmods-slowdebug</strong> - JMods for OpenJDK 25 unoptimised with full debugging on&lt;br /&gt;</p>

<p>The JMods for OpenJDK 25.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-jmods-fastdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">5d923c54e12941b94e5e9d3ebea9d25e678c83fb7a61c8aa79b5ba4db74d0b8c</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-jmods-fastdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-jmods-fastdebug</strong> - JMods for OpenJDK 25 optimised with full debugging on&lt;br /&gt;</p>

<p>The JMods for OpenJDK 25.&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-headless-slowdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">31117a479d460f74c71870ed25c8d3511e9bd3ce3a1f824b506f6d95d00dede4</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-headless-slowdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-headless-slowdebug</strong> - OpenJDK 25 Runtime Environment unoptimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 runtime environment without audio and video support.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-headless-fastdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">eee21f837fa758dec3dc70a3bfcc260e7d85ff31cef5f79f222552289061e977</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-headless-fastdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-headless-fastdebug</strong> - OpenJDK 25 Runtime Environment optimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 runtime environment without audio and video support.&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-fastdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">13f5b0ce1bed96e8d13ec6a37ef83ff7e34c1a2987ad9e21b27da984f8c111b0</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-fastdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-fastdebug</strong> - OpenJDK 25 Runtime Environment optimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 runtime environment.&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-devel-slowdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">c6e44124f4ec030bf2a569e1e86bc40158f237bb8a8135e40729066bb5f9c1ce</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-devel-slowdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-devel-slowdebug</strong> - OpenJDK 25 Development Environment unoptimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 development tools.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-devel-fastdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">172818acfe3dff106b3691f77f98203d7b4bf78e6e73685bd9e9f3d220434c28</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-devel-fastdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-devel-fastdebug</strong> - OpenJDK 25 Development Environment optimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 development tools              .&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-demo-slowdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">be1d352d7c2c3ff696b1ea6ed1fda4a119cdf93e749d01809857b7f3cf2eaab9</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-demo-slowdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-demo-slowdebug</strong> - OpenJDK 25 Demos unoptimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 demos.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-demo-fastdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">86833f1bec6227b3fb95396cc2c78110046e89b4e8c00db44a40c01c4e77fa05</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-demo-fastdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-demo-fastdebug</strong> - OpenJDK 25 Demos optimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 demos.&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-crypto-adapter-slowdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">702ef451f59998edac024656b868f9cc9ab1dbe7481fad9007853957d14d8878</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-crypto-adapter-slowdebug</strong> - OpenJDK 25 Cryptography Adapter Library unoptimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 cryptography adapter library.&lt;br /&gt;
This package is unoptimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>java-25-openjdk-crypto-adapter-fastdebug-1:25.0.4.0.7-2.1.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 11:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">40812a60f62f6aee388048ead48684614805e58f9a06695caad31446f705eb65</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-2.1.el10.aarch64.rpm</link>
      <description><p><strong>java-25-openjdk-crypto-adapter-fastdebug</strong> - OpenJDK 25 Cryptography Adapter Library optimised with full debugging on&lt;br /&gt;</p>

<p>The OpenJDK 25 cryptography adapter library.&lt;br /&gt;
This package is optimised with full debugging. Install only as needed and remove ASAP.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-2.1
- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883

Thu, 16 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.4.0.7-1.1
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp;amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

Tue, 14 Jul 2026 GMT - Andrew Hughes &amp;lt;gnu.andrew@redhat.com&amp;gt; - 1:25.0.3.0.9-3.1
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp;amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-bad-free-devel-1.26.7-8.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 10:27:08 AM GMT</pubDate>
      <guid isPermaLink="false">136ba35e54a77eb078de746686eadfe11defbbd9510fc945d07ec3986b368f24</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/gstreamer1-plugins-bad-free-devel-1.26.7-8.el10.aarch64.rpm</link>
      <description><p><strong>gstreamer1-plugins-bad-free-devel</strong> - Development files for the GStreamer media framework "bad" plug-ins&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of elements which&lt;br /&gt;
operate on media data.&lt;br /&gt;
&lt;br /&gt;
This package contains the development files for the plug-ins that&lt;br /&gt;
aren't tested well enough, or the code is not of good enough quality.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 29 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 1.26.7-8
- Fix bytes/bits confusion in AV1 parser when parsing tile data size
  Resolves: RHEL-184392

Wed, 29 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 1.26.7-7
- Fix CVE-2026-52719: out-of-bounds read in VA JPEG decoder
  Resolves: RHEL-184407

Wed, 29 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 1.26.7-6
- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184427

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libXfont2-devel-2.0.6-6.el10.aarch64</title>
      <pubDate>Wed, 29 Jul 2026 08:31:16 AM GMT</pubDate>
      <guid isPermaLink="false">9b184a82ac39ab604a7e530b34aca686a822aa86e8d95003ecce4a6c21e0e336</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libXfont2-devel-2.0.6-6.el10.aarch64.rpm</link>
      <description><p><strong>libXfont2-devel</strong> - X.Org X11 libXfont2 development package&lt;br /&gt;</p>

<p>X.Org X11 libXfont development package</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 08 Jul 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 2.0.6-6
- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191884
  Resolves: https://redhat.atlassian.net/browse/RHEL-191931
  Resolves: https://redhat.atlassian.net/browse/RHEL-191945

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 2.0.6-5
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-10.0-source-built-artifacts-10.0.110-2.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 04:08:00 PM GMT</pubDate>
      <guid isPermaLink="false">4270e22e3c1a5a182d254004cace4ad5db2c4042d01e2412f94232419cfdeb98</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/dotnet-sdk-10.0-source-built-artifacts-10.0.110-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-10.0-source-built-artifacts</strong> - Internal package for building .NET 10.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET source-built archive is a collection of packages needed&lt;br /&gt;
to build the .NET SDK itself.&lt;br /&gt;
&lt;br /&gt;
These are not meant for general use.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Satish Mane &amp;lt;satmane@redhat.com&amp;gt; - 10.0.110-2
- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192461

Thu, 02 Jul 2026 GMT - Tom Deseyn &amp;lt;tdeseyn@redhat.com&amp;gt; - 10.0.109-3
- Reduce time to detect hanging builds
- Resolves: RHEL-183875

Wed, 10 Jun 2026 GMT - Tom Deseyn &amp;lt;tdeseyn@redhat.com&amp;gt; - 10.0.109-2
- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181557

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-samba-test-4.24.5-100.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 01:13:58 PM GMT</pubDate>
      <guid isPermaLink="false">6abf4f73deffb540a8a69ecb03a43e9783ed395d6a29d130906c7e54308e4175</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/python3-samba-test-4.24.5-100.el10.aarch64.rpm</link>
      <description><p><strong>python3-samba-test</strong> - Samba Python libraries&lt;br /&gt;</p>

<p>The python3-samba-test package contains the Python libraries used by the test suite of Samba.&lt;br /&gt;
If you want to run full set of Samba tests, you need to install this package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.5-100
- Update to version 4.24.5
- resolves: RHEL-175123

Thu, 28 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.3-100
- Update to version 4.24.3
- resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
  in printing
- resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
- resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
  SAMR
- resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE

Mon, 18 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.2-100
- Update to version 4.24.2
- resolves: RHEL-175123

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libwbclient-devel-4.24.5-100.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 01:13:58 PM GMT</pubDate>
      <guid isPermaLink="false">e5889fcf74e5920ef4827721e495d3eb356b87dc7d8905a399e6d15f42db5c7b</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libwbclient-devel-4.24.5-100.el10.aarch64.rpm</link>
      <description><p><strong>libwbclient-devel</strong> - Developer tools for the winbind library&lt;br /&gt;</p>

<p>The libwbclient-devel package provides developer tools for the wbclient&lt;br /&gt;
library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.5-100
- Update to version 4.24.5
- resolves: RHEL-175123

Thu, 28 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.3-100
- Update to version 4.24.3
- resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
  in printing
- resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
- resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
  SAMR
- resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE

Mon, 18 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.2-100
- Update to version 4.24.2
- resolves: RHEL-175123

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-test-libs-4.24.5-100.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 01:13:58 PM GMT</pubDate>
      <guid isPermaLink="false">5290b615bb1a8939ee139552e2690976029f5c6e8c020c9dee45057a242efada</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/samba-test-libs-4.24.5-100.el10.aarch64.rpm</link>
      <description><p><strong>samba-test-libs</strong> - Libraries need by the testing tools for Samba servers and clients&lt;br /&gt;</p>

<p>samba-test-libs provides libraries required by the testing tools.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.5-100
- Update to version 4.24.5
- resolves: RHEL-175123

Thu, 28 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.3-100
- Update to version 4.24.3
- resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
  in printing
- resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
- resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
  SAMR
- resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE

Mon, 18 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.2-100
- Update to version 4.24.2
- resolves: RHEL-175123

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-test-4.24.5-100.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 01:13:58 PM GMT</pubDate>
      <guid isPermaLink="false">f5a387eae62f492e3dfc1de40fb6607e8304d3b9ae6f07678bb9bef0dc5d3b10</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/samba-test-4.24.5-100.el10.aarch64.rpm</link>
      <description><p><strong>samba-test</strong> - Testing tools for Samba servers and clients&lt;br /&gt;</p>

<p>samba-test provides testing tools for both the server and client&lt;br /&gt;
packages of Samba.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.5-100
- Update to version 4.24.5
- resolves: RHEL-175123

Thu, 28 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.3-100
- Update to version 4.24.3
- resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
  in printing
- resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
- resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
  SAMR
- resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE

Mon, 18 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.2-100
- Update to version 4.24.2
- resolves: RHEL-175123

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-pidl-4.24.5-100.el10.noarch</title>
      <pubDate>Tue, 28 Jul 2026 01:13:58 PM GMT</pubDate>
      <guid isPermaLink="false">e2e774745df9af0c8edde8bd27eb8f6875524bd332fa22fbb884c4deca8b2343</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/samba-pidl-4.24.5-100.el10.noarch.rpm</link>
      <description><p><strong>samba-pidl</strong> - Perl IDL compiler&lt;br /&gt;</p>

<p>The samba-pidl package contains the Perl IDL compiler used by Samba&lt;br /&gt;
and Wireshark to parse IDL and similar protocols</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.5-100
- Update to version 4.24.5
- resolves: RHEL-175123

Thu, 28 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.3-100
- Update to version 4.24.3
- resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
  in printing
- resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
- resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
  SAMR
- resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE

Mon, 18 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.2-100
- Update to version 4.24.2
- resolves: RHEL-175123

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-devel-4.24.5-100.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 01:13:58 PM GMT</pubDate>
      <guid isPermaLink="false">2ac09f22bebd5be3fca605a7c060b750b1d8ae443ee1ef4515df6b1c32694240</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/samba-devel-4.24.5-100.el10.aarch64.rpm</link>
      <description><p><strong>samba-devel</strong> - Developer tools for Samba libraries&lt;br /&gt;</p>

<p>The samba-devel package contains the header files for the libraries&lt;br /&gt;
needed to develop programs that link against the SMB, RPC and other&lt;br /&gt;
libraries in the Samba suite.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.5-100
- Update to version 4.24.5
- resolves: RHEL-175123

Thu, 28 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.3-100
- Update to version 4.24.3
- resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
  in printing
- resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
- resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
  SAMR
- resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE

Mon, 18 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.2-100
- Update to version 4.24.2
- resolves: RHEL-175123

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libsmbclient-devel-4.24.5-100.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 01:13:58 PM GMT</pubDate>
      <guid isPermaLink="false">43068b42ab9e1494529a69c6ab455cacf20d53bcf143f9941f23672442e75b5a</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libsmbclient-devel-4.24.5-100.el10.aarch64.rpm</link>
      <description><p><strong>libsmbclient-devel</strong> - Developer tools for the SMB client library&lt;br /&gt;</p>

<p>The libsmbclient-devel package contains the header files and libraries needed&lt;br /&gt;
to develop programs that link against the SMB client library in the Samba&lt;br /&gt;
suite.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.5-100
- Update to version 4.24.5
- resolves: RHEL-175123

Thu, 28 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.3-100
- Update to version 4.24.3
- resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
  in printing
- resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
- resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
  SAMR
- resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE

Mon, 18 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.2-100
- Update to version 4.24.2
- resolves: RHEL-175123

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libnetapi-devel-4.24.5-100.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 01:13:58 PM GMT</pubDate>
      <guid isPermaLink="false">3506ae4e800668c7ff233bfaa2885fa861ab77d94fc6e7c0c612673f853a54da</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libnetapi-devel-4.24.5-100.el10.aarch64.rpm</link>
      <description><p><strong>libnetapi-devel</strong> - Developer tools for the NETAPI library&lt;br /&gt;</p>

<p>The libnetapi-devel package contains the header files and libraries needed to&lt;br /&gt;
develop programs that link against the NETAPI library in the Samba suite.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.5-100
- Update to version 4.24.5
- resolves: RHEL-175123

Thu, 28 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.3-100
- Update to version 4.24.3
- resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
  in printing
- resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
- resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
  SAMR
- resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE

Mon, 18 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.2-100
- Update to version 4.24.2
- resolves: RHEL-175123

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libldb-devel-4.24.5-100.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 01:13:58 PM GMT</pubDate>
      <guid isPermaLink="false">3b7cdd83e32de60447b6882f86f0b5628eb3d5cae565449d05de7f827b4e04f5</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libldb-devel-4.24.5-100.el10.aarch64.rpm</link>
      <description><p><strong>libldb-devel</strong> - Developer tools for the LDB library&lt;br /&gt;</p>

<p>Header files needed to develop programs that link against the LDB library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.5-100
- Update to version 4.24.5
- resolves: RHEL-175123

Thu, 28 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.3-100
- Update to version 4.24.3
- resolves: RHEL-156281 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161645 - CVE-2026-4480 samba: Samba: Remote Code Execution
  in printing
- resolves: RHEL-170596 - CVE-2026-40170 samba: ngtcp2:
- resolves: RHEL-177928 - CVE-2026-4408 samba: Remote Code Execution in
  SAMR
- resolves: RHEL-166872 - build hardening with FORTIFY_SOURCE

Mon, 18 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.24.2-100
- Update to version 4.24.2
- resolves: RHEL-175123

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>NetworkManager-libnm-devel-1:1.58.0-1.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 11:28:32 AM GMT</pubDate>
      <guid isPermaLink="false">7a725e3c3f8d4a7e829d23ae80bd685053e19f51b2b1d308e08b7fd8c7e1a21c</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/NetworkManager-libnm-devel-1.58.0-1.el10.aarch64.rpm</link>
      <description><p><strong>NetworkManager-libnm-devel</strong> - Header files for adding NetworkManager support to applications.&lt;br /&gt;</p>

<p>This package contains the header and pkg-config files for development&lt;br /&gt;
applications using NetworkManager functionality from applications.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Ján Václav &amp;lt;jvaclav@redhat.com&amp;gt; - 1:1.58.0-1
- Update to 1.58.0 stable release (RHEL-182761)

Thu, 02 Jul 2026 GMT - Josephine Pfeiffer &amp;lt;josie@redhat.com&amp;gt; - 1:1.58~rc1-1
- Update to 1.58-rc1 release
- Add IPv6-mostly support with CLAT via a BPF program (RHEL-93551)
- Keep permissive modify.system polkit defaults for RHEL 10 minor compatibility
- Warn about gateways that are not directly reachable (RHEL-126543)
- Fix suppressing DHCPv6 DNS servers with ipv6.ignore-auto-dns on reapply (RHEL-149149)
- Fix sending DHCP release on bridge interfaces (RHEL-126455)
- Allow selecting from available devices when creating profiles in nmtui (RHEL-129186)
- Fix AVC error when running NetworkManager --print-config as systemd service (RHEL-140113)
- Fix invalid default value of the bond arp_missed_max option (RHEL-182559)
- Fix RPM scriptlet dependencies for udev-less container installs

Thu, 14 May 2026 GMT - Ján Václav &amp;lt;jvaclav@redhat.com&amp;gt; - 1:1.56.1-1
- Update to 1.56.1
- fix handling onlink route flag for ECMP routes (RHEL-1402)
- Add Geneve support (RHEL-122042)
- Add support for persistently un/managing devices (RHEL-142555)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ocaml-libnbd-devel-1.25.7-1.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 11:28:30 AM GMT</pubDate>
      <guid isPermaLink="false">61b2dfd3d41fcc01489c94f00b48c2c9a6dcdcd500ecc3a03953c7136fe07258</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/ocaml-libnbd-devel-1.25.7-1.el10.aarch64.rpm</link>
      <description><p><strong>ocaml-libnbd-devel</strong> - OCaml language development package for libnbd&lt;br /&gt;</p>

<p>This package contains OCaml language development package for&lt;br /&gt;
libnbd.  Install this if you want to compile OCaml software which&lt;br /&gt;
uses libnbd.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Richard W.M. Jones &amp;lt;rjones@redhat.com&amp;gt; - 1.25.7-1
- Rebase to libnbd 1.25.7
- Synch spec file with Fedora
  resolves: RHEL-153363
- Fix command injection in nbd+ssh URIs
  resolves: RHEL-189057
- Fix regression in nbd+ssh URIs caused by preceding change
  resolves: RHEL-217012

Tue, 17 Feb 2026 GMT - Richard W.M. Jones &amp;lt;rjones@redhat.com&amp;gt; - 1.24.1-1
- Rebase to libnbd 1.24.1
  resolves: RHEL-111243
- Synch spec file with Fedora
- Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
  resolves: RHEL-129296
- Implement Post-Quantum Cryptography (PQC)
  resolves: RHEL-101267

Wed, 16 Jul 2025 GMT - Richard W.M. Jones &amp;lt;rjones@redhat.com&amp;gt; - 1.22.2-2
- Rebase to libnbd 1.22.2
- Synch spec file with Fedora Rawhide.
  resolves: RHEL-78831
- Fix nbdinfo with dark theme
  resolves: RHEL-7119
- Add nbdcopy --blkhash option
  resolves: RHEL-85513
- Log the version of libnbd / nbdcopy in virt-v2v output
  resolves: RHEL-104019

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ocaml-libnbd-1.25.7-1.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 11:28:30 AM GMT</pubDate>
      <guid isPermaLink="false">990936c6cab92b55598d15e94ea139b8e1af088ec056936539eb1061adeaf59e</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/ocaml-libnbd-1.25.7-1.el10.aarch64.rpm</link>
      <description><p><strong>ocaml-libnbd</strong> - OCaml language bindings for libnbd&lt;br /&gt;</p>

<p>This package contains OCaml language bindings for libnbd.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Richard W.M. Jones &amp;lt;rjones@redhat.com&amp;gt; - 1.25.7-1
- Rebase to libnbd 1.25.7
- Synch spec file with Fedora
  resolves: RHEL-153363
- Fix command injection in nbd+ssh URIs
  resolves: RHEL-189057
- Fix regression in nbd+ssh URIs caused by preceding change
  resolves: RHEL-217012

Tue, 17 Feb 2026 GMT - Richard W.M. Jones &amp;lt;rjones@redhat.com&amp;gt; - 1.24.1-1
- Rebase to libnbd 1.24.1
  resolves: RHEL-111243
- Synch spec file with Fedora
- Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
  resolves: RHEL-129296
- Implement Post-Quantum Cryptography (PQC)
  resolves: RHEL-101267

Wed, 16 Jul 2025 GMT - Richard W.M. Jones &amp;lt;rjones@redhat.com&amp;gt; - 1.22.2-2
- Rebase to libnbd 1.22.2
- Synch spec file with Fedora Rawhide.
  resolves: RHEL-78831
- Fix nbdinfo with dark theme
  resolves: RHEL-7119
- Add nbdcopy --blkhash option
  resolves: RHEL-85513
- Log the version of libnbd / nbdcopy in virt-v2v output
  resolves: RHEL-104019

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libnbd-devel-1.25.7-1.el10.aarch64</title>
      <pubDate>Tue, 28 Jul 2026 11:28:30 AM GMT</pubDate>
      <guid isPermaLink="false">e8d344ef699ffb28be5ae7122db61437b5c290a1eb55bb9dd44ac6e0fc719ce2</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libnbd-devel-1.25.7-1.el10.aarch64.rpm</link>
      <description><p><strong>libnbd-devel</strong> - Development headers for libnbd&lt;br /&gt;</p>

<p>This package contains development headers for libnbd.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 28 Jul 2026 GMT - Richard W.M. Jones &amp;lt;rjones@redhat.com&amp;gt; - 1.25.7-1
- Rebase to libnbd 1.25.7
- Synch spec file with Fedora
  resolves: RHEL-153363
- Fix command injection in nbd+ssh URIs
  resolves: RHEL-189057
- Fix regression in nbd+ssh URIs caused by preceding change
  resolves: RHEL-217012

Tue, 17 Feb 2026 GMT - Richard W.M. Jones &amp;lt;rjones@redhat.com&amp;gt; - 1.24.1-1
- Rebase to libnbd 1.24.1
  resolves: RHEL-111243
- Synch spec file with Fedora
- Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
  resolves: RHEL-129296
- Implement Post-Quantum Cryptography (PQC)
  resolves: RHEL-101267

Wed, 16 Jul 2025 GMT - Richard W.M. Jones &amp;lt;rjones@redhat.com&amp;gt; - 1.22.2-2
- Rebase to libnbd 1.22.2
- Synch spec file with Fedora Rawhide.
  resolves: RHEL-78831
- Fix nbdinfo with dark theme
  resolves: RHEL-7119
- Add nbdcopy --blkhash option
  resolves: RHEL-85513
- Log the version of libnbd / nbdcopy in virt-v2v output
  resolves: RHEL-104019

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libgfortran-static-14.4.1-2.el10.aarch64</title>
      <pubDate>Mon, 27 Jul 2026 07:21:18 PM GMT</pubDate>
      <guid isPermaLink="false">93008ff53439b505df92189307bf003742c9b67b4b53e753604002fc16704eb5</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libgfortran-static-14.4.1-2.el10.aarch64.rpm</link>
      <description><p><strong>libgfortran-static</strong> - Static Fortran libraries&lt;br /&gt;</p>

<p>This package contains static Fortran libraries.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 24 Jul 2026 GMT - David Malcolm &amp;lt;dmalcolm@redhat.com&amp;gt; - 14.4.1-2
- update from releases/gcc-14 branch
  - PRs c++/125674, c++/126057, fortran/97592, fortran/103367, fortran/125172,
	fortran/125998, middle-end/126084, rtl-optimization/125173,
	target/67459, target/105116, target/106895, target/116597,
	target/119210, target/122948, target/124908, target/125818,
	target/125972, target/126049, tree-optimization/120201,
	tree-optimization/126257, tree-optimization/126262

Mon, 29 Jun 2026 GMT - Joseph Myers &amp;lt;josmyers@redhat.com&amp;gt; - 14.4.1-1
- update from releases/gcc-14 branch (RHEL-174638)
  - GCC 14.4 release
  - PRs ada/107475, ada/123060, ada/123138, ada/123289, ada/123867,
	ada/124226, ada/124285, ada/124607, ada/124836, ada/125044,
	ada/125695, c/101312, c/105555, c/123018, c/123156, c/123365,
	c/123882, c/124830, c++/65271, c++/91388, c++/97740, c++/98930,
	c++/101670, c++/120224, c++/120685, c++/120876, c++/121445,
	c++/121822, c++/122070, c++/122318, c++/122494, c++/122550,
	c++/122658, c++/122772, c++/122834, c++/123346, c++/123529,
	c++/123578, c++/123597, c++/123667, c++/123676, c++/123684,
	c++/123814, c++/123818, c++/123845, c++/123889, c++/124489,
	c++/124632, c++/124850, c++/125315, c++/125376, d/119799, d/120096,
	d/121477, d/123046, d/123264, d/123349, d/123407, d/123419, d/123422,
	d/123798, d/124026, d/125089, debug/121964, debug/123886,
	fortran/79524, fortran/82721, fortran/84245, fortran/85352,
	fortran/93715, fortran/93814, fortran/93832, fortran/94978,
	fortran/95338, fortran/95879, fortran/96087, fortran/96986,
	fortran/98203, fortran/100155, fortran/100194, fortran/102430,
	fortran/102459, fortran/102596, fortran/102619, fortran/105168,
	fortran/106546, fortran/106946, fortran/107425, fortran/107968,
	fortran/109788, fortran/115260, fortran/116829, fortran/119273,
	fortran/120286, fortran/120723, fortran/121616, fortran/122046,
	fortran/122206, fortran/124161, fortran/124450, fortran/124482,
	fortran/124751, ipa/106260, ipa/111036, ipa/114790, ipa/116296,
	ipa/122856, ipa/123416, ipa/125699, libstdc++/90192, libstdc++/102259,
	libstdc++/105580, libstdc++/105857, libstdc++/109965,
	libstdc++/114153, libstdc++/114865, libstdc++/118088,
	libstdc++/118681, libstdc++/120029, libstdc++/120293,
	libstdc++/120390, libstdc++/120789, libstdc++/121771,
	libstdc++/122062, libstdc++/122567, libstdc++/122661,
	libstdc++/122726, libstdc++/122821, libstdc++/122842,
	libstdc++/123100, libstdc++/123147, libstdc++/123875,
	libstdc++/123991, libstdc++/124024, libstdc++/124124,
	libstdc++/124363, libstdc++/124568, libstdc++/125369, lto/121588,
	lto/122515, lto/122620, middle-end/111817, middle-end/116772,
	middle-end/120052, middle-end/120564, middle-end/121581,
	middle-end/122624, middle-end/122689, middle-end/123175,
	middle-end/123386, middle-end/123573, middle-end/123575,
	middle-end/123703, middle-end/123775, middle-end/123876,
	middle-end/123887, middle-end/123978, middle-end/124056,
	middle-end/124250, middle-end/124491, middle-end/125146,
	middle-end/125621, pch/14940, preprocessor/105412,
	preprocessor/123273, rtl-optimization/106859, rtl-optimization/116053,
	rtl-optimization/116600, rtl-optimization/120182,
	rtl-optimization/121773, rtl-optimization/122215,
	rtl-optimization/123121, rtl-optimization/123294,
	rtl-optimization/124454, target/99930, target/105192, target/112400,
	target/117575, target/117771, target/119079, target/119130,
	target/120250, target/120645, target/122000, target/122097,
	target/122223, target/122323, target/122446, target/122516,
	target/122527, target/122695, target/122867, target/123102,
	target/123155, target/123217, target/123271, target/123285,
	target/123457, target/123460, target/123484, target/123521,
	target/123548, target/123607, target/123624, target/123742,
	target/123766, target/123779, target/123807, target/124126,
	target/124133, target/124138, target/124236, target/124315,
	target/124316, target/124335, target/124365, target/124366,
	target/124705, target/124712, target/124933, target/125049,
	target/125351, target/125409, target/125611, target/125670,
	target/125751, target/125752, target/125795, target/125992,
	testsuite/123004, testsuite/123353, testsuite/124682,
	tree-optimization/107997, tree-optimization/109410,
	tree-optimization/110043, tree-optimization/117217,
	tree-optimization/119532, tree-optimization/119568,
	tree-optimization/120341, tree-optimization/120560,
	tree-optimization/120987, tree-optimization/121104,
	tree-optimization/121776, tree-optimization/121844,
	tree-optimization/122126, tree-optimization/122394,
	tree-optimization/122408, tree-optimization/122793,
	tree-optimization/122943, tree-optimization/122976,
	tree-optimization/123061, tree-optimization/123300,
	tree-optimization/123351, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123537,
	tree-optimization/123596, tree-optimization/123602,
	tree-optimization/123636, tree-optimization/123645,
	tree-optimization/123729, tree-optimization/123736,
	tree-optimization/123741, tree-optimization/123864,
	tree-optimization/124130, tree-optimization/124132,
	tree-optimization/124135, tree-optimization/124151,
	tree-optimization/124288, tree-optimization/124358,
	tree-optimization/124555, tree-optimization/124627,
	tree-optimization/124677, tree-optimization/124826,
	tree-optimization/124868, tree-optimization/125019,
	tree-optimization/125025, tree-optimization/125039,
	tree-optimization/125079, tree-optimization/125431,
	tree-optimization/125501, tree-optimization/125774

Tue, 17 Feb 2026 GMT - Joseph Myers &amp;lt;josmyers@redhat.com&amp;gt; - 14.3.1-4.4
- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libstdc++-static-14.4.1-2.el10.aarch64</title>
      <pubDate>Mon, 27 Jul 2026 07:21:18 PM GMT</pubDate>
      <guid isPermaLink="false">5fff1d3c2e08f7b5213ef6977ffc65142da034838085ac3ed7169fe120ded847</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libstdc++-static-14.4.1-2.el10.aarch64.rpm</link>
      <description><p><strong>libstdc++-static</strong> - Static libraries for the GNU standard C++ library&lt;br /&gt;</p>

<p>Static libraries for the GNU standard C++ library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 24 Jul 2026 GMT - David Malcolm &amp;lt;dmalcolm@redhat.com&amp;gt; - 14.4.1-2
- update from releases/gcc-14 branch
  - PRs c++/125674, c++/126057, fortran/97592, fortran/103367, fortran/125172,
	fortran/125998, middle-end/126084, rtl-optimization/125173,
	target/67459, target/105116, target/106895, target/116597,
	target/119210, target/122948, target/124908, target/125818,
	target/125972, target/126049, tree-optimization/120201,
	tree-optimization/126257, tree-optimization/126262

Mon, 29 Jun 2026 GMT - Joseph Myers &amp;lt;josmyers@redhat.com&amp;gt; - 14.4.1-1
- update from releases/gcc-14 branch (RHEL-174638)
  - GCC 14.4 release
  - PRs ada/107475, ada/123060, ada/123138, ada/123289, ada/123867,
	ada/124226, ada/124285, ada/124607, ada/124836, ada/125044,
	ada/125695, c/101312, c/105555, c/123018, c/123156, c/123365,
	c/123882, c/124830, c++/65271, c++/91388, c++/97740, c++/98930,
	c++/101670, c++/120224, c++/120685, c++/120876, c++/121445,
	c++/121822, c++/122070, c++/122318, c++/122494, c++/122550,
	c++/122658, c++/122772, c++/122834, c++/123346, c++/123529,
	c++/123578, c++/123597, c++/123667, c++/123676, c++/123684,
	c++/123814, c++/123818, c++/123845, c++/123889, c++/124489,
	c++/124632, c++/124850, c++/125315, c++/125376, d/119799, d/120096,
	d/121477, d/123046, d/123264, d/123349, d/123407, d/123419, d/123422,
	d/123798, d/124026, d/125089, debug/121964, debug/123886,
	fortran/79524, fortran/82721, fortran/84245, fortran/85352,
	fortran/93715, fortran/93814, fortran/93832, fortran/94978,
	fortran/95338, fortran/95879, fortran/96087, fortran/96986,
	fortran/98203, fortran/100155, fortran/100194, fortran/102430,
	fortran/102459, fortran/102596, fortran/102619, fortran/105168,
	fortran/106546, fortran/106946, fortran/107425, fortran/107968,
	fortran/109788, fortran/115260, fortran/116829, fortran/119273,
	fortran/120286, fortran/120723, fortran/121616, fortran/122046,
	fortran/122206, fortran/124161, fortran/124450, fortran/124482,
	fortran/124751, ipa/106260, ipa/111036, ipa/114790, ipa/116296,
	ipa/122856, ipa/123416, ipa/125699, libstdc++/90192, libstdc++/102259,
	libstdc++/105580, libstdc++/105857, libstdc++/109965,
	libstdc++/114153, libstdc++/114865, libstdc++/118088,
	libstdc++/118681, libstdc++/120029, libstdc++/120293,
	libstdc++/120390, libstdc++/120789, libstdc++/121771,
	libstdc++/122062, libstdc++/122567, libstdc++/122661,
	libstdc++/122726, libstdc++/122821, libstdc++/122842,
	libstdc++/123100, libstdc++/123147, libstdc++/123875,
	libstdc++/123991, libstdc++/124024, libstdc++/124124,
	libstdc++/124363, libstdc++/124568, libstdc++/125369, lto/121588,
	lto/122515, lto/122620, middle-end/111817, middle-end/116772,
	middle-end/120052, middle-end/120564, middle-end/121581,
	middle-end/122624, middle-end/122689, middle-end/123175,
	middle-end/123386, middle-end/123573, middle-end/123575,
	middle-end/123703, middle-end/123775, middle-end/123876,
	middle-end/123887, middle-end/123978, middle-end/124056,
	middle-end/124250, middle-end/124491, middle-end/125146,
	middle-end/125621, pch/14940, preprocessor/105412,
	preprocessor/123273, rtl-optimization/106859, rtl-optimization/116053,
	rtl-optimization/116600, rtl-optimization/120182,
	rtl-optimization/121773, rtl-optimization/122215,
	rtl-optimization/123121, rtl-optimization/123294,
	rtl-optimization/124454, target/99930, target/105192, target/112400,
	target/117575, target/117771, target/119079, target/119130,
	target/120250, target/120645, target/122000, target/122097,
	target/122223, target/122323, target/122446, target/122516,
	target/122527, target/122695, target/122867, target/123102,
	target/123155, target/123217, target/123271, target/123285,
	target/123457, target/123460, target/123484, target/123521,
	target/123548, target/123607, target/123624, target/123742,
	target/123766, target/123779, target/123807, target/124126,
	target/124133, target/124138, target/124236, target/124315,
	target/124316, target/124335, target/124365, target/124366,
	target/124705, target/124712, target/124933, target/125049,
	target/125351, target/125409, target/125611, target/125670,
	target/125751, target/125752, target/125795, target/125992,
	testsuite/123004, testsuite/123353, testsuite/124682,
	tree-optimization/107997, tree-optimization/109410,
	tree-optimization/110043, tree-optimization/117217,
	tree-optimization/119532, tree-optimization/119568,
	tree-optimization/120341, tree-optimization/120560,
	tree-optimization/120987, tree-optimization/121104,
	tree-optimization/121776, tree-optimization/121844,
	tree-optimization/122126, tree-optimization/122394,
	tree-optimization/122408, tree-optimization/122793,
	tree-optimization/122943, tree-optimization/122976,
	tree-optimization/123061, tree-optimization/123300,
	tree-optimization/123351, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123537,
	tree-optimization/123596, tree-optimization/123602,
	tree-optimization/123636, tree-optimization/123645,
	tree-optimization/123729, tree-optimization/123736,
	tree-optimization/123741, tree-optimization/123864,
	tree-optimization/124130, tree-optimization/124132,
	tree-optimization/124135, tree-optimization/124151,
	tree-optimization/124288, tree-optimization/124358,
	tree-optimization/124555, tree-optimization/124627,
	tree-optimization/124677, tree-optimization/124826,
	tree-optimization/124868, tree-optimization/125019,
	tree-optimization/125025, tree-optimization/125039,
	tree-optimization/125079, tree-optimization/125431,
	tree-optimization/125501, tree-optimization/125774

Tue, 17 Feb 2026 GMT - Joseph Myers &amp;lt;josmyers@redhat.com&amp;gt; - 14.3.1-4.4
- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-9.0-source-built-artifacts-9.0.119-2.el10.aarch64</title>
      <pubDate>Mon, 27 Jul 2026 05:38:46 PM GMT</pubDate>
      <guid isPermaLink="false">0ad9640cfcb51b1a7dceb52dd4888469b151adfe7e3329d4716acb434c5d9239</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/dotnet-sdk-9.0-source-built-artifacts-9.0.119-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-9.0-source-built-artifacts</strong> - Internal package for building .NET 9.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET source-built archive is a collection of packages needed&lt;br /&gt;
to build the .NET SDK itself.&lt;br /&gt;
&lt;br /&gt;
These are not meant for general use.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Satish Mane &amp;lt;satmane@redhat.com&amp;gt; - 9.0.119-2
- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192471

Thu, 02 Jul 2026 GMT - Tom Deseyn &amp;lt;tdeseyn@redhat.com&amp;gt; - 9.0.118-3
- Reduce time to detect hanging builds
- Resolves: RHEL-191642

Wed, 10 Jun 2026 GMT - Tom Deseyn &amp;lt;tdeseyn@redhat.com&amp;gt; - 9.0.118-2
- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181552

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>selinux-policy-targeted-extra-42.1.26-1.el10.noarch</title>
      <pubDate>Mon, 27 Jul 2026 04:02:07 PM GMT</pubDate>
      <guid isPermaLink="false">3f8a7b2b5110bc4e56ed43c2e3888d37227d47dd65b5056042fceecd2e0b2273</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/selinux-policy-targeted-extra-42.1.26-1.el10.noarch.rpm</link>
      <description><p><strong>selinux-policy-targeted-extra</strong> - SELinux targeted policy - extra modules&lt;br /&gt;</p>

<p>SELinux targeted policy package - extra modules</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 27 Jul 2026 GMT - Zdenek Pytela &amp;lt;zpytela@redhat.com&amp;gt; - 42.1.26-1
- Add missing rule for automotive policy
Resolves: RHEL-216823
- Allow aide get attributes of all filesystems
Resolves: RHEL-182423
- Allow postfix_postdrop_t/system_mail_t append to init unix domain stream sockets
Resolves: RHEL-169587
- Dontaudit unconfined_t map its private directories
Resolves: RHEL-154554
- Allow dhcpcd hook scripts read generic files in /proc
Resolves: RHEL-153117
- Allow dhcpc_hook_t connect to init_t over a unix stream socket
Resolves: RHEL-147153
- Allow dhcpc_hook_t unix_dgram_socket and module_request
Resolves: RHEL-147153
- Allow sysadm_t run and read/write networkmanager bpf programs
Resolves: RHEL-145714
- Allow nfsidmapd read virt lib files
Resolves: RHEL-132866
- Support cronie create crontab backups
Resolves: RHEL-129528
- Allow unconfined_t mounton its lnk_files
Resolves: RHEL-127120
- Allow systemd-machined to manage nspawn runtime directory
Resolves: RHEL-105966

Sat, 04 Jul 2026 GMT - Zdenek Pytela &amp;lt;zpytela@redhat.com&amp;gt; - 42.1.25-1
- Allow kernel write to unconfined and sysadm users' keys
Resolves: RHEL-156860
- Allow logwatch to getattr nsfs files
Resolves: RHEL-160897
- Support systemtap on a UEFI+SecureBoot system
Resolves: RHEL-178490
- Remove extra parameters from interface headers
Resolves: RHEL-129394
- Add missing interface requirements
Resolves: RHEL-135488

Mon, 22 Jun 2026 GMT - Zdenek Pytela &amp;lt;zpytela@redhat.com&amp;gt; - 42.1.24-1
- Apply the systemd system generator template to the kdump-dep generator
Resolves: RHEL-155963
- Allow staff user mounton /var/lib dirs
Resolves: RHEL-171123
- Allow staff user read nsfs files
Resolves: RHEL-171123
- Allow staff user additional sandboxing permissions
Resolves: RHEL-171123
- Allow staff_sudo_t read PID1's process state
Resolves: RHEL-171123
- Allow staff_sudo_t read logind sessions files
Resolves: RHEL-171123
- Allow staff user delete thump_tmp_t files
Resolves: RHEL-171123
- Allow staff user connect to systemd-logind over a unix stream socket
Resolves: RHEL-171123
- Allow staff user mount /proc
Resolves: RHEL-171123
- Support confined users usage of bubblewrap
Resolves: RHEL-171123
- Allow staff role read/write cockpit-session unix stream sockets
Resolves: RHEL-171123
- Allow some confined users read and map generic log files
Resolves: RHEL-171123
- Add files_mounton_generic_tmp_dirs() interface
Resolves: RHEL-171123
- Apply the systemd system generator template to the anaconda generator
Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2417835
- Support new sanlock features - using libdm and SG_IO
Resolves: RHEL-171586
- Allow pcm-sensor-server the sys_admin capability
Resolves: RHEL-171325
- Allow the kernel to execute also special files
Resolves: https://redhat.atlassian.net/browse/RHEL-72728
- Split using dirsrv_ and dirsrvadmin_ interfaces into separate blocks
Resolves: RHEL-62706
- Dontaudit virt_driver_domain execmem
Resolves: RHEL-44901

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>selinux-policy-mls-extra-42.1.26-1.el10.noarch</title>
      <pubDate>Mon, 27 Jul 2026 04:02:07 PM GMT</pubDate>
      <guid isPermaLink="false">db6116eb2bb438e6c232d0d5da7d2343dce7fb7a0dbe4880488b179f7fc59141</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/selinux-policy-mls-extra-42.1.26-1.el10.noarch.rpm</link>
      <description><p><strong>selinux-policy-mls-extra</strong> - SELinux mls policy - extra modules&lt;br /&gt;</p>

<p>SELinux mls policy package - extra modules</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 27 Jul 2026 GMT - Zdenek Pytela &amp;lt;zpytela@redhat.com&amp;gt; - 42.1.26-1
- Add missing rule for automotive policy
Resolves: RHEL-216823
- Allow aide get attributes of all filesystems
Resolves: RHEL-182423
- Allow postfix_postdrop_t/system_mail_t append to init unix domain stream sockets
Resolves: RHEL-169587
- Dontaudit unconfined_t map its private directories
Resolves: RHEL-154554
- Allow dhcpcd hook scripts read generic files in /proc
Resolves: RHEL-153117
- Allow dhcpc_hook_t connect to init_t over a unix stream socket
Resolves: RHEL-147153
- Allow dhcpc_hook_t unix_dgram_socket and module_request
Resolves: RHEL-147153
- Allow sysadm_t run and read/write networkmanager bpf programs
Resolves: RHEL-145714
- Allow nfsidmapd read virt lib files
Resolves: RHEL-132866
- Support cronie create crontab backups
Resolves: RHEL-129528
- Allow unconfined_t mounton its lnk_files
Resolves: RHEL-127120
- Allow systemd-machined to manage nspawn runtime directory
Resolves: RHEL-105966

Sat, 04 Jul 2026 GMT - Zdenek Pytela &amp;lt;zpytela@redhat.com&amp;gt; - 42.1.25-1
- Allow kernel write to unconfined and sysadm users' keys
Resolves: RHEL-156860
- Allow logwatch to getattr nsfs files
Resolves: RHEL-160897
- Support systemtap on a UEFI+SecureBoot system
Resolves: RHEL-178490
- Remove extra parameters from interface headers
Resolves: RHEL-129394
- Add missing interface requirements
Resolves: RHEL-135488

Mon, 22 Jun 2026 GMT - Zdenek Pytela &amp;lt;zpytela@redhat.com&amp;gt; - 42.1.24-1
- Apply the systemd system generator template to the kdump-dep generator
Resolves: RHEL-155963
- Allow staff user mounton /var/lib dirs
Resolves: RHEL-171123
- Allow staff user read nsfs files
Resolves: RHEL-171123
- Allow staff user additional sandboxing permissions
Resolves: RHEL-171123
- Allow staff_sudo_t read PID1's process state
Resolves: RHEL-171123
- Allow staff_sudo_t read logind sessions files
Resolves: RHEL-171123
- Allow staff user delete thump_tmp_t files
Resolves: RHEL-171123
- Allow staff user connect to systemd-logind over a unix stream socket
Resolves: RHEL-171123
- Allow staff user mount /proc
Resolves: RHEL-171123
- Support confined users usage of bubblewrap
Resolves: RHEL-171123
- Allow staff role read/write cockpit-session unix stream sockets
Resolves: RHEL-171123
- Allow some confined users read and map generic log files
Resolves: RHEL-171123
- Add files_mounton_generic_tmp_dirs() interface
Resolves: RHEL-171123
- Apply the systemd system generator template to the anaconda generator
Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2417835
- Support new sanlock features - using libdm and SG_IO
Resolves: RHEL-171586
- Allow pcm-sensor-server the sys_admin capability
Resolves: RHEL-171325
- Allow the kernel to execute also special files
Resolves: https://redhat.atlassian.net/browse/RHEL-72728
- Split using dirsrv_ and dirsrvadmin_ interfaces into separate blocks
Resolves: RHEL-62706
- Dontaudit virt_driver_domain execmem
Resolves: RHEL-44901

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>selinux-policy-extra-42.1.26-1.el10.noarch</title>
      <pubDate>Mon, 27 Jul 2026 04:02:07 PM GMT</pubDate>
      <guid isPermaLink="false">868e057590a73171714c39058fcce75197334130ecb56f0061fd6790c355436e</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/selinux-policy-extra-42.1.26-1.el10.noarch.rpm</link>
      <description><p><strong>selinux-policy-extra</strong> - SELinux policy - extra modules&lt;br /&gt;</p>

<p>SELinux policy - extra modules</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 27 Jul 2026 GMT - Zdenek Pytela &amp;lt;zpytela@redhat.com&amp;gt; - 42.1.26-1
- Add missing rule for automotive policy
Resolves: RHEL-216823
- Allow aide get attributes of all filesystems
Resolves: RHEL-182423
- Allow postfix_postdrop_t/system_mail_t append to init unix domain stream sockets
Resolves: RHEL-169587
- Dontaudit unconfined_t map its private directories
Resolves: RHEL-154554
- Allow dhcpcd hook scripts read generic files in /proc
Resolves: RHEL-153117
- Allow dhcpc_hook_t connect to init_t over a unix stream socket
Resolves: RHEL-147153
- Allow dhcpc_hook_t unix_dgram_socket and module_request
Resolves: RHEL-147153
- Allow sysadm_t run and read/write networkmanager bpf programs
Resolves: RHEL-145714
- Allow nfsidmapd read virt lib files
Resolves: RHEL-132866
- Support cronie create crontab backups
Resolves: RHEL-129528
- Allow unconfined_t mounton its lnk_files
Resolves: RHEL-127120
- Allow systemd-machined to manage nspawn runtime directory
Resolves: RHEL-105966

Sat, 04 Jul 2026 GMT - Zdenek Pytela &amp;lt;zpytela@redhat.com&amp;gt; - 42.1.25-1
- Allow kernel write to unconfined and sysadm users' keys
Resolves: RHEL-156860
- Allow logwatch to getattr nsfs files
Resolves: RHEL-160897
- Support systemtap on a UEFI+SecureBoot system
Resolves: RHEL-178490
- Remove extra parameters from interface headers
Resolves: RHEL-129394
- Add missing interface requirements
Resolves: RHEL-135488

Mon, 22 Jun 2026 GMT - Zdenek Pytela &amp;lt;zpytela@redhat.com&amp;gt; - 42.1.24-1
- Apply the systemd system generator template to the kdump-dep generator
Resolves: RHEL-155963
- Allow staff user mounton /var/lib dirs
Resolves: RHEL-171123
- Allow staff user read nsfs files
Resolves: RHEL-171123
- Allow staff user additional sandboxing permissions
Resolves: RHEL-171123
- Allow staff_sudo_t read PID1's process state
Resolves: RHEL-171123
- Allow staff_sudo_t read logind sessions files
Resolves: RHEL-171123
- Allow staff user delete thump_tmp_t files
Resolves: RHEL-171123
- Allow staff user connect to systemd-logind over a unix stream socket
Resolves: RHEL-171123
- Allow staff user mount /proc
Resolves: RHEL-171123
- Support confined users usage of bubblewrap
Resolves: RHEL-171123
- Allow staff role read/write cockpit-session unix stream sockets
Resolves: RHEL-171123
- Allow some confined users read and map generic log files
Resolves: RHEL-171123
- Add files_mounton_generic_tmp_dirs() interface
Resolves: RHEL-171123
- Apply the systemd system generator template to the anaconda generator
Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2417835
- Support new sanlock features - using libdm and SG_IO
Resolves: RHEL-171586
- Allow pcm-sensor-server the sys_admin capability
Resolves: RHEL-171325
- Allow the kernel to execute also special files
Resolves: https://redhat.atlassian.net/browse/RHEL-72728
- Split using dirsrv_ and dirsrvadmin_ interfaces into separate blocks
Resolves: RHEL-62706
- Dontaudit virt_driver_domain execmem
Resolves: RHEL-44901

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>xorg-x11-server-Xwayland-devel-24.1.9-7.el10.aarch64</title>
      <pubDate>Mon, 27 Jul 2026 12:08:33 PM GMT</pubDate>
      <guid isPermaLink="false">f799de12bf3d6c2008079b27d08802704a0b63800193ab2e88eed5ae5e93b3df</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/xorg-x11-server-Xwayland-devel-24.1.9-7.el10.aarch64.rpm</link>
      <description><p><strong>xorg-x11-server-Xwayland-devel</strong> - Development package&lt;br /&gt;</p>

<p>The development package provides the developmental files which are&lt;br /&gt;
necessary for developing Wayland compositors using Xwayland.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 08 Jul 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 24.1.9-7
- CVE fix for: CVE-2026-55999, CVE-2026-56000
  Resolves: https://redhat.atlassian.net/browse/RHEL-191523
  Resolves: https://redhat.atlassian.net/browse/RHEL-191533

Fri, 12 Jun 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 24.1.9-6
- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-183890

Wed, 10 Jun 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 24.1.9-5
- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263
  Resolves: https://redhat.atlassian.net/browse/RHEL-182444

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rest-devel-0.9.1-12.el10.aarch64</title>
      <pubDate>Mon, 27 Jul 2026 07:41:07 AM GMT</pubDate>
      <guid isPermaLink="false">0239ec1454557c53f7b9a220bffc5f4fe21f02a648a64306396a3198e474bba5</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/rest-devel-0.9.1-12.el10.aarch64.rpm</link>
      <description><p><strong>rest-devel</strong> - Development package for rest&lt;br /&gt;</p>

<p>Files for development with rest.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 27 Jul 2026 GMT - Milan Crha &amp;lt;mcrha@redhat.com&amp;gt; - 0.9.1-12
- Add patch for CVE-2026-16615 (Weak random number generation in PKCE implementation)
  Resolves: RHEL-213751

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 0.9.1-11
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-8.0-source-built-artifacts-8.0.129-2.el10.aarch64</title>
      <pubDate>Sun, 26 Jul 2026 10:16:33 AM GMT</pubDate>
      <guid isPermaLink="false">6a227b746a8c8b9c0c89521a3f99bd487be1948e62f9ebf1cb0e0f87c591b97e</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/dotnet-sdk-8.0-source-built-artifacts-8.0.129-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-8.0-source-built-artifacts</strong> - Internal package for building .NET 8.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET source-built archive is a collection of packages needed&lt;br /&gt;
to build the .NET SDK itself.&lt;br /&gt;
&lt;br /&gt;
These are not meant for general use.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Satish Mane &amp;lt;satmane@redhat.com&amp;gt; - 8.0.129-2
- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192466

Thu, 02 Jul 2026 GMT - Tom Deseyn &amp;lt;tdeseyn@redhat.com&amp;gt; - 8.0.128-3
- Reduce time to detect hanging builds
- Resolves: RHEL-191648

Wed, 10 Jun 2026 GMT - Tom Deseyn &amp;lt;tdeseyn@redhat.com&amp;gt; - 8.0.128-2
- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181054

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libxml2-static-2.12.5-15.el10.aarch64</title>
      <pubDate>Fri, 24 Jul 2026 09:11:19 PM GMT</pubDate>
      <guid isPermaLink="false">ec0fec065e5e2850f798343937c664db9fe487bedb2b58f495a5666ad5ac59cf</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libxml2-static-2.12.5-15.el10.aarch64.rpm</link>
      <description><p><strong>libxml2-static</strong> - Static library for libxml2&lt;br /&gt;</p>

<p>Static library for libxml2 provided for specific uses or shaving a few&lt;br /&gt;
microseconds when parsing, do not link to them for generic purpose packages.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 24 Jul 2026 GMT - David King &amp;lt;dking@redhat.com&amp;gt; - 2.12.5-15
- Fix some SAST warnings (RHEL-45047)

Tue, 16 Jun 2026 GMT - David King &amp;lt;dking@redhat.com&amp;gt; - 2.12.5-14
- Fix CVE-2025-6170 (RHEL-186743)

Wed, 03 Jun 2026 GMT - David King &amp;lt;dking@redhat.com&amp;gt; - 2.12.5-13
- Revert parser error fix (RHEL-126803)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>iproute-devel-7.0.0-2.el10.aarch64</title>
      <pubDate>Fri, 24 Jul 2026 03:26:05 PM GMT</pubDate>
      <guid isPermaLink="false">f29cc9dd068b13dee170c7f7a7e5d823ea50a2ce31ba7e90ad57deae6e1b0a65</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/iproute-devel-7.0.0-2.el10.aarch64.rpm</link>
      <description><p><strong>iproute-devel</strong> - iproute development files&lt;br /&gt;</p>

<p>The libnetlink static library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 24 Jul 2026 GMT - Andrea Claudi &amp;lt;aclaudi@redhat.com&amp;gt; - 7.0.0-2
- iproute-7.0.0-2.el10

Wed, 27 May 2026 GMT - Andrea Claudi &amp;lt;aclaudi@redhat.com&amp;gt; - 7.0.0-1
- iproute-7.0.0-1.el10

Tue, 27 Jan 2026 GMT - Andrea Claudi &amp;lt;aclaudi@redhat.com&amp;gt; - 6.17.0-2
- iproute-6.17.0-2.el10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glib2-static-2.80.4-15.el10.aarch64</title>
      <pubDate>Fri, 24 Jul 2026 01:08:39 PM GMT</pubDate>
      <guid isPermaLink="false">5a48be455c7133a753e6419c3184fe2322f3f5c48afb7929d5bfb21c9827c92e</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/glib2-static-2.80.4-15.el10.aarch64.rpm</link>
      <description><p><strong>glib2-static</strong> - glib static&lt;br /&gt;</p>

<p>The glib2-static subpackage contains static libraries for glib2.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 24 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.80.4-15
- Fix CVE-2026-58016: XML parser state handling for node nesting

Tue, 14 Jul 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 2.80.4-14
- gdbusnameowning: Downgrade ReleaseName warning on closed connection to
  debug

Thu, 07 May 2026 GMT - Michael Catanzaro &amp;lt;mcatanzaro@gnome.org&amp;gt; - 2.80.4-13
- Fix CVE-2025-14087 and CVE-2025-14512

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glib2-doc-2.80.4-15.el10.aarch64</title>
      <pubDate>Fri, 24 Jul 2026 01:08:39 PM GMT</pubDate>
      <guid isPermaLink="false">94c49be98ba747d0c44504fe73f8b1fc80b4c71fa4467621105cdff37b101e85</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/glib2-doc-2.80.4-15.el10.aarch64.rpm</link>
      <description><p><strong>glib2-doc</strong> - A library of handy utility functions&lt;br /&gt;</p>

<p>The glib2-doc package includes documentation for the GLib library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 24 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.80.4-15
- Fix CVE-2026-58016: XML parser state handling for node nesting

Tue, 14 Jul 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 2.80.4-14
- gdbusnameowning: Downgrade ReleaseName warning on closed connection to
  debug

Thu, 07 May 2026 GMT - Michael Catanzaro &amp;lt;mcatanzaro@gnome.org&amp;gt; - 2.80.4-13
- Fix CVE-2025-14087 and CVE-2025-14512

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dbus-doc-1:1.14.10-6.el10.noarch</title>
      <pubDate>Fri, 24 Jul 2026 12:23:33 PM GMT</pubDate>
      <guid isPermaLink="false">7627b936c3c0d51a10c640b9c0495fd95c798a386cea7ee46bd8eaac22e97b3e</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/dbus-doc-1.14.10-6.el10.noarch.rpm</link>
      <description><p><strong>dbus-doc</strong> - Developer documentation for D-BUS&lt;br /&gt;</p>

<p>This package contains developer documentation for D-Bus along with&lt;br /&gt;
other supporting documentation such as the introspect dtd file.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 24 Jul 2026 GMT - David King &amp;lt;dking@redhat.com&amp;gt; - 1:1.14.10-6
- Fix some SAST warnings (RHEL-45015)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1:1.14.10-5
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gobject-introspection-devel-1.79.1-7.el10.aarch64</title>
      <pubDate>Fri, 24 Jul 2026 05:18:08 AM GMT</pubDate>
      <guid isPermaLink="false">206d74b623569d83845c810c2162579151dec0543c594a17c776c94d884057a9</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/gobject-introspection-devel-1.79.1-7.el10.aarch64.rpm</link>
      <description><p><strong>gobject-introspection-devel</strong> - Libraries and headers for gobject-introspection&lt;br /&gt;</p>

<p>Libraries and headers for gobject-introspection</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 24 Jul 2026 GMT - David King &amp;lt;dking@redhat.com&amp;gt; - 1.79.1-7
- Fix several SAST warnings (RHEL-45044)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.79.1-6
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>criu-devel-4.2-9.el10.aarch64</title>
      <pubDate>Thu, 23 Jul 2026 06:07:32 PM GMT</pubDate>
      <guid isPermaLink="false">24689a8efeb175b06e6958282d2fc4177f11ef2f033f1f2de95e243184f74ae6</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/criu-devel-4.2-9.el10.aarch64.rpm</link>
      <description><p><strong>criu-devel</strong> - Header files and libraries for criu&lt;br /&gt;</p>

<p>This package contains header files and libraries for criu.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Čestmír Kalina &amp;lt;ckalina@redhat.com&amp;gt; - 4.2-9
- replace ELFDATA2LSB with BORD in has_elf_identity (checkpoint-restore/criu#3059)
- Resolves: RHEL-180600

Mon, 20 Jul 2026 GMT - Adrian Reber &amp;lt;areber@redhat.com&amp;gt; - 4.2-8
- Handle rseq in generic compel code (checkpoint-restore/criu#3097)

Wed, 08 Jul 2026 GMT - Adrian Reber &amp;lt;areber@redhat.com&amp;gt; - 4.2-7
- Apply patch to fix RHEL-193276
- Resolves: RHEL-193276

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rust-std-static-aarch64-unknown-none-softfloat-1.97.1-1.el10.aarch64</title>
      <pubDate>Thu, 23 Jul 2026 02:29:56 PM GMT</pubDate>
      <guid isPermaLink="false">b89fa26285290d3f15d1d280b5910b3a41ec95e094775d7c2c22e753ef9c9676</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/rust-std-static-aarch64-unknown-none-softfloat-1.97.1-1.el10.aarch64.rpm</link>
      <description><p><strong>rust-std-static-aarch64-unknown-none-softfloat</strong> - Standard library for Rust aarch64-unknown-none-softfloat&lt;br /&gt;</p>

<p>This package includes the standard libraries for building applications&lt;br /&gt;
written in Rust for the embedded target aarch64-unknown-none-softfloat.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 23 Jul 2026 GMT - Paul Murphy &amp;lt;murp@redhat.com&amp;gt; - 1.97.1-1
- Update to Rust 1.97.1

Thu, 04 Jun 2026 GMT - Josh Stone &amp;lt;jistone@redhat.com&amp;gt; - 1.96.0-1
- Update to Rust 1.96.0

Wed, 22 Apr 2026 GMT - Paul Murphy &amp;lt;murp@redhat.com&amp;gt; - 1.95.0-1
- Update to Rust 1.95.0

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>podman-tests-7:6.0.2-1.el10.aarch64</title>
      <pubDate>Wed, 22 Jul 2026 09:17:42 AM GMT</pubDate>
      <guid isPermaLink="false">3344c30ffe837703326c71a0be5c0729439bec22461c575e40d9e06fc8150e37</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/podman-tests-6.0.2-1.el10.aarch64.rpm</link>
      <description><p><strong>podman-tests</strong> - Tests for podman&lt;br /&gt;</p>

<p>Tests for podman&lt;br /&gt;
&lt;br /&gt;
This package contains system tests for podman. Only intended to be used for&lt;br /&gt;
gating tests. Not supported for end users / customers.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 22 Jul 2026 GMT - Jindrich Novy &amp;lt;jnovy@redhat.com&amp;gt; - 7:6.0.2-1
- update to the latest content of https://github.com/containers/podman/releases/tag/v6.0.2
- Related: RHEL-185733

Fri, 17 Jul 2026 GMT - Jindrich Novy &amp;lt;jnovy@redhat.com&amp;gt; - 7:6.0.1-1
- update to https://github.com/containers/podman/releases/tag/v6.0.1
- Resolves: RHEL-185733

Fri, 26 Jun 2026 GMT - Jindrich Novy &amp;lt;jnovy@redhat.com&amp;gt; - 7:6.0.0-1
- update to https://github.com/containers/podman/releases/tag/v6.0.0
- Resolves: RHEL-185733

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-test-rpm-macros-16.14-3.el10.noarch</title>
      <pubDate>Tue, 21 Jul 2026 04:15:04 PM GMT</pubDate>
      <guid isPermaLink="false">5625427686f57d3abe0244e3762a48cfd0ebf05606f8b76236554fc9aa4874e0</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/postgresql-test-rpm-macros-16.14-3.el10.noarch.rpm</link>
      <description><p><strong>postgresql-test-rpm-macros</strong> - Convenience RPM macros for build-time testing against PostgreSQL server&lt;br /&gt;</p>

<p>This package is meant to be added as BuildRequires: dependency of other packages&lt;br /&gt;
that want to run build-time testsuite against running PostgreSQL server.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 20 Jul 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.14-3
- Add SSL test coverage for colon-separated ssl_ecdh_curve group list
- Backport test from upstream commit 3d1ef3a15c3 (adapted for PG16)
- Resolves: RHEL-119229

Mon, 20 Jul 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.14-2
- Enable PQC-compatible TLS group negotiation via ssl_ecdh_curve
- Backport SSL_CTX_set1_groups_list() from PG18 (upstream commit 3d1ef3a15c3)
- Backport SSLerrmessageExt() helper for improved error reporting
- Update GUC description to document colon-separated group list support
- Resolves: RHEL-119229

Tue, 14 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 16.14-1
- Update to 16.14
- Add BuildRequires: perl(FindBin) for Perl 5.40 compatibility
- Resolves: RHEL-208694

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>freeipmi-devel-1.6.18-2.el10.aarch64</title>
      <pubDate>Tue, 21 Jul 2026 02:56:38 PM GMT</pubDate>
      <guid isPermaLink="false">5da0ee1d12c98dcdb9189646238ffdcfdaaa80d73b1851581ad0889fca1b3282</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/freeipmi-devel-1.6.18-2.el10.aarch64.rpm</link>
      <description><p><strong>freeipmi-devel</strong> - Development package for FreeIPMI&lt;br /&gt;</p>

<p>Development package for FreeIPMI. This package includes the FreeIPMI&lt;br /&gt;
header files and libraries.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 21 Jul 2026 GMT - Lukáš Zaoral &amp;lt;lzaoral@redhat.com&amp;gt; - 1.6.18-2
- Add tmpfiles configs for image mode

Wed, 17 Jun 2026 GMT - Pavel Cahyna &amp;lt;pcahyna@redhat.com&amp;gt; - 1.6.18-1
- Update to 1.6.18

Wed, 15 Apr 2026 GMT - Pavel Cahyna &amp;lt;pcahyna@redhat.com&amp;gt; - 1.6.17-1
- Update to 1.6.17

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>opencryptoki-devel-3.27.0-1.el10.aarch64</title>
      <pubDate>Tue, 21 Jul 2026 12:38:10 PM GMT</pubDate>
      <guid isPermaLink="false">151ddcdcee98635bede14158f361375ac9b467f546916b5a2ce70815a4643bdd</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/opencryptoki-devel-3.27.0-1.el10.aarch64.rpm</link>
      <description><p><strong>opencryptoki-devel</strong> - Development files for openCryptoki&lt;br /&gt;</p>

<p>This package contains the development header files for building&lt;br /&gt;
opencryptoki and PKCS#11 based applications</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 21 Jul 2026 GMT - Than Ngo &amp;lt;than@redhat.com&amp;gt; - 3.27.0-1
- Resolves: RHEL-171557, Fix CVE-2026-40253
- Resolves: RHEL-169193, Fix syslog warning even for identically configured control points
- Resolves: RHEL-157535, openCryptoki soft token: support PKCS #11 V3.2 ML-DSA and ML-KEM
- Resolves: RHEL-157678, openCryptoki CCA token: support PKCS #11 V3.2 ML-DSA
- Resolves: RHEL-157805, openCryptoki EP11 token: support PKCS #11 V3.2 ML-DSA and ML-KEM
- Resolves: RHEL-136094, Update to 3.27.0

Fri, 13 Feb 2026 GMT - Than Ngo &amp;lt;than@redhat.com&amp;gt; - 3.26.0-2
- Resolves: RHEL-144816, CVE-2026-23893

Wed, 17 Dec 2025 GMT - Than Ngo &amp;lt;than@redhat.com&amp;gt; - 3.26.0-1
- Resolves: RHEL-75138, ep11 token BLS support
- Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100058, openCryptoki 3.26.0

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libnvme-devel-1.16.2-1.el10.aarch64</title>
      <pubDate>Tue, 21 Jul 2026 06:54:47 AM GMT</pubDate>
      <guid isPermaLink="false">0f4f4d74f1f528f655f9b0c283b665fbde78bd992a7e2945e6496d26557716dc</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libnvme-devel-1.16.2-1.el10.aarch64.rpm</link>
      <description><p><strong>libnvme-devel</strong> - Development files for libnvme&lt;br /&gt;</p>

<p>This package provides header files to include and libraries to link with&lt;br /&gt;
for Linux-native nvme device management.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 17 Jul 2026 GMT - Utkarsh Singh &amp;lt;utsingh@redhat.com&amp;gt; - 1.16.2-1
- Update libnvme to version 1.16.2 (RHEL-212863)

Tue, 30 Jun 2026 GMT - Utkarsh Singh &amp;lt;utsingh@redhat.com&amp;gt; - 1.16.1-4
- Fix potential NULL pointer dereference in nvme_host_get_ids (RHEL-181034)

Fri, 27 Mar 2026 GMT - Maurizio Lombardi &amp;lt;mlombard@redhat.com&amp;gt; - 1.16.1-3
- Fix linked list corruption (RHEL-156539)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-test-3.12.13-3.el10.aarch64</title>
      <pubDate>Mon, 20 Jul 2026 11:18:36 AM GMT</pubDate>
      <guid isPermaLink="false">e0057e7e95752b2f2046afbff3ad7b6be29d435e72ca96bc74ec777459a94120</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/python3-test-3.12.13-3.el10.aarch64.rpm</link>
      <description><p><strong>python3-test</strong> - The self-test suite for the main python3 package&lt;br /&gt;</p>

<p>The self-test suite for the Python interpreter.&lt;br /&gt;
&lt;br /&gt;
This is only useful to test Python itself. For testing general Python code,&lt;br /&gt;
you should use the unittest module from python3-libs, or a library such as&lt;br /&gt;
python3-pytest.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 20 Jul 2026 GMT - Lukáš Zachar &amp;lt;lzachar@redhat.com&amp;gt; - 3.12.13-3
- Security fix for CVE-2026-15308
Resolves: RHEL-193774

Thu, 16 Apr 2026 GMT - Charalampos Stratakis &amp;lt;cstratak@redhat.com&amp;gt; - 3.12.13-2
- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: RHEL-167886, RHEL-168120

Thu, 16 Apr 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.13-1
- Update to 3.12.13
- Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
- Require expat &amp;gt;= 2.7.2 to prevent symbol lookup errors at runtime with older expat
Related: RHEL-167886, RHEL-168120

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-idle-3.12.13-3.el10.aarch64</title>
      <pubDate>Mon, 20 Jul 2026 11:18:36 AM GMT</pubDate>
      <guid isPermaLink="false">9f3e0991fd30621e309f405d0ad4b12f7b1892f19de8ce446b29d5156f677386</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/python3-idle-3.12.13-3.el10.aarch64.rpm</link>
      <description><p><strong>python3-idle</strong> - A basic graphical development environment for Python&lt;br /&gt;</p>

<p>IDLE is Python’s Integrated Development and Learning Environment.&lt;br /&gt;
&lt;br /&gt;
IDLE has the following features: Python shell window (interactive&lt;br /&gt;
interpreter) with colorizing of code input, output, and error messages;&lt;br /&gt;
multi-window text editor with multiple undo, Python colorizing,&lt;br /&gt;
smart indent, call tips, auto completion, and other features;&lt;br /&gt;
search within any window, replace within editor windows, and&lt;br /&gt;
search through multiple files (grep); debugger with persistent&lt;br /&gt;
breakpoints, stepping, and viewing of global and local namespaces;&lt;br /&gt;
configuration, browsers, and other dialogs.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 20 Jul 2026 GMT - Lukáš Zachar &amp;lt;lzachar@redhat.com&amp;gt; - 3.12.13-3
- Security fix for CVE-2026-15308
Resolves: RHEL-193774

Thu, 16 Apr 2026 GMT - Charalampos Stratakis &amp;lt;cstratak@redhat.com&amp;gt; - 3.12.13-2
- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: RHEL-167886, RHEL-168120

Thu, 16 Apr 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.13-1
- Update to 3.12.13
- Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
- Require expat &amp;gt;= 2.7.2 to prevent symbol lookup errors at runtime with older expat
Related: RHEL-167886, RHEL-168120

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-debug-3.12.13-3.el10.aarch64</title>
      <pubDate>Mon, 20 Jul 2026 11:18:36 AM GMT</pubDate>
      <guid isPermaLink="false">3473e374576f872247ce67241e92ab7cd27aac5f88428c4257d0edfd20bb68d0</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/python3-debug-3.12.13-3.el10.aarch64.rpm</link>
      <description><p><strong>python3-debug</strong> - Debug version of the Python runtime&lt;br /&gt;</p>

<p>python3-debug provides a version of the Python runtime with numerous debugging&lt;br /&gt;
features enabled, aimed at advanced Python users such as developers of Python&lt;br /&gt;
extension modules.&lt;br /&gt;
&lt;br /&gt;
This version uses more memory and will be slower than the regular Python build,&lt;br /&gt;
but is useful for tracking down reference-counting issues and other bugs.&lt;br /&gt;
&lt;br /&gt;
The debug build shares installation directories with the standard Python&lt;br /&gt;
runtime. Python modules -- source (.py), bytecode (.pyc), and C-API extensions&lt;br /&gt;
(.cpython*.so) -- are compatible between this and the standard version&lt;br /&gt;
of Python.&lt;br /&gt;
&lt;br /&gt;
The debug runtime additionally supports debug builds of C-API extensions&lt;br /&gt;
(with the "d" ABI flag) for debugging issues in those extensions.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 20 Jul 2026 GMT - Lukáš Zachar &amp;lt;lzachar@redhat.com&amp;gt; - 3.12.13-3
- Security fix for CVE-2026-15308
Resolves: RHEL-193774

Thu, 16 Apr 2026 GMT - Charalampos Stratakis &amp;lt;cstratak@redhat.com&amp;gt; - 3.12.13-2
- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: RHEL-167886, RHEL-168120

Thu, 16 Apr 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.13-1
- Update to 3.12.13
- Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
- Require expat &amp;gt;= 2.7.2 to prevent symbol lookup errors at runtime with older expat
Related: RHEL-167886, RHEL-168120

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libtiff-tools-4.6.0-11.el10.aarch64</title>
      <pubDate>Mon, 20 Jul 2026 10:14:16 AM GMT</pubDate>
      <guid isPermaLink="false">3d6307398d7c5fdafca08344fd4f3df3468128bbf37a6ae10a7f28ea8a888d71</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/libtiff-tools-4.6.0-11.el10.aarch64.rpm</link>
      <description><p><strong>libtiff-tools</strong> - Command-line utility programs for manipulating TIFF files&lt;br /&gt;</p>

<p>This package contains command-line programs for manipulating TIFF format&lt;br /&gt;
image files using the libtiff library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 20 Jul 2026 GMT - Michal Hlavinka &amp;lt;mhlavink@redhat.com&amp;gt; - 4.6.0-11
- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189377)
- make sure documentation is updated during build for CVE-2023-52355 (RHEL-179103)

Mon, 29 Jun 2026 GMT - Michal Hlavinka &amp;lt;mhlavink@redhat.com&amp;gt; - 4.6.0-10
- reintroduce ignore option -i as it is required for tests (RHEL-185330)

Wed, 03 Jun 2026 GMT - Michal Hlavinka &amp;lt;mhlavink@redhat.com&amp;gt; - 4.6.0-9
- backport documentation change for CVE-2023-52355 (RHEL-179103)
- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nginx-mod-devel-2:1.26.3-12.el10.aarch64</title>
      <pubDate>Mon, 20 Jul 2026 08:24:52 AM GMT</pubDate>
      <guid isPermaLink="false">6aa56a7dfba46e16ad98a123df81d80cdf77cbc082a76ad91e90106bb9771525</guid>
      <link>http://mirror.stream.centos.org/10-stream/CRB/aarch64/os/Packages/nginx-mod-devel-1.26.3-12.el10.aarch64.rpm</link>
      <description><p><strong>nginx-mod-devel</strong> - Nginx module development files&lt;br /&gt;</p>

<p>Nginx module development files.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 20 Jul 2026 GMT - Luboš Uhliarik &amp;lt;luhliari@redhat.com&amp;gt; - 2:1.26.3-12
- Fixes CVE-2026-9256, CVE-2026-42055 and HTTP/2: Remote Denial of Service
  via compression bomb and Slowloris-style attack

Thu, 21 May 2026 GMT - Luboš Uhliarik &amp;lt;luhliari@redhat.com&amp;gt; - 2:1.26.3-11
- Resolves: RHEL-176226 - nginx: NGINX: Arbitrary

Fri, 10 Apr 2026 GMT - pdancak &amp;lt;pdancak@redhat.com&amp;gt; - 2:1.26.3-10
- RHEL-157876 CVE-2026-32647 nginx: NGINX: Denial of Service or Code
  Execution via specially crafted MP4 files

...&lt;/pre&gt;</description>
    </item>
  </channel>
</rss>
