<?xml version="1.0" ?>
<rss version="2.0">
  <channel>
    <title>Rocky Linux 10 aarch64 CRB</title>
    <link>https://rockylinux.org</link>
    <description>Recently updated packages for Rocky Linux 10 aarch64 CRB</description>
    <pubDate>Mon, 05 Oct 2026 03:05:14 PM GMT</pubDate>
    <generator>DNF</generator>
    <item>
      <title>ghostscript-tools-dvipdf-10.02.1-16.el10_2.1.noarch</title>
      <pubDate>Fri, 02 Oct 2026 01:10:13 AM GMT</pubDate>
      <guid isPermaLink="false">168ec8d1e1232ccfb6f4f9cbf0c0d7e3084e2ff0fba2abae021b82f9c7b095af</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/g/ghostscript-tools-dvipdf-10.02.1-16.el10_2.1.noarch.rpm</link>
      <description><p><strong>ghostscript-tools-dvipdf</strong> - Ghostscript's 'dvipdf' utility&lt;br /&gt;</p>

<p>This package provides the utility 'dvipdf' for converting of TeX DVI files into&lt;br /&gt;
PDF files using Ghostscript and dvips.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 21 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 10.02.1-16.1
- RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000
  JPXDecode output adapter

Wed, 07 May 2025 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 10.02.1-16
- RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow

Tue, 15 Apr 2025 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 10.02.1-15
- RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
- RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libgs-devel-10.02.1-16.el10_2.1.aarch64</title>
      <pubDate>Fri, 02 Oct 2026 01:10:13 AM GMT</pubDate>
      <guid isPermaLink="false">69dd0db6fb8ca967d4f3a81bc63c0cfb24871e690ad9b15c2e72ec1e813a33d9</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/l/libgs-devel-10.02.1-16.el10_2.1.aarch64.rpm</link>
      <description><p><strong>libgs-devel</strong> - Development files for Ghostscript's library&lt;br /&gt;</p>

<p>This package contains development files that are useful for building packages&lt;br /&gt;
against Ghostscript's library, which provides Ghostscript's core functionality.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 21 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 10.02.1-16.1
- RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000
  JPXDecode output adapter

Wed, 07 May 2025 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 10.02.1-16
- RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow

Tue, 15 Apr 2025 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 10.02.1-15
- RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
- RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libpcap-devel-14:1.10.4-7.el10_2.1.aarch64</title>
      <pubDate>Thu, 01 Oct 2026 11:07:21 AM GMT</pubDate>
      <guid isPermaLink="false">4508ed893c9b115a871ad082f44bd2ed5af1ceee92e4bffefd0dbeaa61be846a</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/l/libpcap-devel-1.10.4-7.el10_2.1.aarch64.rpm</link>
      <description><p><strong>libpcap-devel</strong> - Libraries and header files for the libpcap library&lt;br /&gt;</p>

<p>Libpcap provides a portable framework for low-level network&lt;br /&gt;
monitoring.  Libpcap can provide network statistics collection,&lt;br /&gt;
security monitoring and network debugging.  Since almost every system&lt;br /&gt;
vendor provides a different interface for packet capture, the libpcap&lt;br /&gt;
authors created this system-independent API to ease in porting and to&lt;br /&gt;
alleviate the need for several system-dependent packet capture modules&lt;br /&gt;
in each application.&lt;br /&gt;
&lt;br /&gt;
This package provides the libraries, include files, and other&lt;br /&gt;
resources needed for developing libpcap applications.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 09 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 14:1.10.4-7.1
- Fix CVE-2026-0799: validate BPF scratch memory register indices
  in the BPF interpreter to prevent out-of-bounds memory access
  Resolves: RHEL-256921

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 14:1.10.4-7
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libwinpr-devel-2:3.10.3-12.el10_2.13.aarch64</title>
      <pubDate>Wed, 30 Sep 2026 09:14:45 PM GMT</pubDate>
      <guid isPermaLink="false">6c00d852686b543c3d42d4917746aea2fdd3efd9dbdc2e5595b0c6d49ec62771</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/l/libwinpr-devel-3.10.3-12.el10_2.13.aarch64.rpm</link>
      <description><p><strong>libwinpr-devel</strong> - Windows Portable Runtime development files&lt;br /&gt;</p>

<p>The freerdp-libwinpr-devel package contains libraries and header files for&lt;br /&gt;
developing applications that use freerdp-libwinpr.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 21 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:3.10.3-12.13
- Abort after PROTOCOL_FAILED_NEGO (CVE-2026-91949)
  Resolves: RHEL-264913

Mon, 14 Sep 2026 GMT - Ondrej Holy &amp;lt;oholy@redhat.com&amp;gt; - 2:3.10.3-12.12
- Fix several regressions in CVE-2026-73241
  Resolves: RHEL-257781

Tue, 25 Aug 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:3.10.3-12.11
- Fix RPC gateway fragment size and capacity checks (CVE-2026-55193)
  Resolves: RHEL-247346

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>freerdp-server-2:3.10.3-12.el10_2.13.aarch64</title>
      <pubDate>Wed, 30 Sep 2026 09:14:45 PM GMT</pubDate>
      <guid isPermaLink="false">79abb8f08aedd0b46c83c9a822ba5f0e67c8e3758f2a740506d9b880ce42560e</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/f/freerdp-server-3.10.3-12.el10_2.13.aarch64.rpm</link>
      <description><p><strong>freerdp-server</strong> - Server support for freerdp&lt;br /&gt;</p>

<p>The freerdp-server package contains servers which can export a desktop via&lt;br /&gt;
the RDP protocol.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 21 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:3.10.3-12.13
- Abort after PROTOCOL_FAILED_NEGO (CVE-2026-91949)
  Resolves: RHEL-264913

Mon, 14 Sep 2026 GMT - Ondrej Holy &amp;lt;oholy@redhat.com&amp;gt; - 2:3.10.3-12.12
- Fix several regressions in CVE-2026-73241
  Resolves: RHEL-257781

Tue, 25 Aug 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:3.10.3-12.11
- Fix RPC gateway fragment size and capacity checks (CVE-2026-55193)
  Resolves: RHEL-247346

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>freerdp-devel-2:3.10.3-12.el10_2.13.aarch64</title>
      <pubDate>Wed, 30 Sep 2026 09:14:45 PM GMT</pubDate>
      <guid isPermaLink="false">958c8f3419addfe16616e7b4819cea7c7f829c7711123d61e3a2f3115297d484</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/f/freerdp-devel-3.10.3-12.el10_2.13.aarch64.rpm</link>
      <description><p><strong>freerdp-devel</strong> - Development files for freerdp&lt;br /&gt;</p>

<p>The freerdp-devel package contains libraries and header files for developing&lt;br /&gt;
applications that use freerdp-libs.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 21 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:3.10.3-12.13
- Abort after PROTOCOL_FAILED_NEGO (CVE-2026-91949)
  Resolves: RHEL-264913

Mon, 14 Sep 2026 GMT - Ondrej Holy &amp;lt;oholy@redhat.com&amp;gt; - 2:3.10.3-12.12
- Fix several regressions in CVE-2026-73241
  Resolves: RHEL-257781

Tue, 25 Aug 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:3.10.3-12.11
- Fix RPC gateway fragment size and capacity checks (CVE-2026-55193)
  Resolves: RHEL-247346

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libperf-6.12.0-211.61.1.el10_2.aarch64</title>
      <pubDate>Tue, 29 Sep 2026 12:18:37 PM GMT</pubDate>
      <guid isPermaLink="false">8ee3bd4f62344cf2b154302caad48ab403bf3c31c44ff381708c63b56c67767d</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/l/libperf-6.12.0-211.61.1.el10_2.aarch64.rpm</link>
      <description><p><strong>libperf</strong> - The perf library from kernel source&lt;br /&gt;</p>

<p>This package contains the kernel source perf library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-tools-libs-devel-6.12.0-211.61.1.el10_2.aarch64</title>
      <pubDate>Tue, 29 Sep 2026 12:18:37 PM GMT</pubDate>
      <guid isPermaLink="false">938e9426746ac5bda28a7d593574ade73f54e6ff9d74754e0d43251585c4cd98</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/k/kernel-tools-libs-devel-6.12.0-211.61.1.el10_2.aarch64.rpm</link>
      <description><p><strong>kernel-tools-libs-devel</strong> - Assortment of tools for the Linux kernel&lt;br /&gt;</p>

<p>This package contains the development files for the tools/ directory from&lt;br /&gt;
the kernel source.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-cross-headers-6.12.0-211.61.1.el10_2.aarch64</title>
      <pubDate>Tue, 29 Sep 2026 12:18:37 PM GMT</pubDate>
      <guid isPermaLink="false">a416448324627fd3fc129a77416213a9b045e4e3ecd6118a8de69c8a60dcbdca</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/k/kernel-cross-headers-6.12.0-211.61.1.el10_2.aarch64.rpm</link>
      <description><p><strong>kernel-cross-headers</strong> - Header files for the Linux kernel for use by cross-glibc&lt;br /&gt;</p>

<p>Kernel-cross-headers includes the C header files that specify the interface&lt;br /&gt;
between the Linux kernel and userspace libraries and programs.  The&lt;br /&gt;
header files define structures and constants that are needed for&lt;br /&gt;
building most standard programs and are also needed for rebuilding the&lt;br /&gt;
cross-glibc package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-ipatests-4.13.4-1.el10_2.noarch</title>
      <pubDate>Mon, 28 Sep 2026 09:30:15 AM GMT</pubDate>
      <guid isPermaLink="false">edd8b7f5a3640770d4c6336767f2498cd550696d9ba6854b0777e74e4027c7c7</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/p/python3-ipatests-4.13.4-1.el10_2.noarch.rpm</link>
      <description><p><strong>python3-ipatests</strong> - IPA tests and test tools&lt;br /&gt;</p>

<p>IPA is an integrated solution to provide centrally managed Identity (users,&lt;br /&gt;
hosts, services), Authentication (SSO, 2FA), and Authorization&lt;br /&gt;
(host access control, SELinux user roles, services). The solution provides&lt;br /&gt;
features for further integration with Linux based clients (SUDO, automount)&lt;br /&gt;
and integration with Active Directory based infrastructures (Trusts).&lt;br /&gt;
This package contains tests that verify IPA functionality under Python 3.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 14 Sep 2026 GMT - Florence Blanc-Renaud &amp;lt;flo@redhat.com&amp;gt; - 4.13.4-1
- Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service
- Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z]
- Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI
- Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z]
- Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z]
- Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z]
- Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z]
- Resolves: RHEL-240768 ipa-migrate tool is renaming host records &amp;amp; host info in automount information [rhel-10.2.z]
- Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z]
- Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z]
- Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z]
- Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z]
- Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z]
- Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z]
- Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z]
- Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL
- Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2]

Wed, 15 Apr 2026 GMT - Florence Blanc-Renaud &amp;lt;flo@redhat.com&amp;gt; - 4.13.1-3.2
- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing

Fri, 10 Apr 2026 GMT - Florence Blanc-Renaud &amp;lt;flo@redhat.com&amp;gt; - 4.13.1-3.1
- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libxml2-static-2.12.5-10.el10_2.4.aarch64</title>
      <pubDate>Thu, 24 Sep 2026 05:15:03 PM GMT</pubDate>
      <guid isPermaLink="false">6f89270620ebfddcee3b95b891ffabc2c511ce683391e99bdb58b36fd5e9c86e</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/l/libxml2-static-2.12.5-10.el10_2.4.aarch64.rpm</link>
      <description><p><strong>libxml2-static</strong> - Static library for libxml2&lt;br /&gt;</p>

<p>Static library for libxml2 provided for specific uses or shaving a few&lt;br /&gt;
microseconds when parsing, do not link to them for generic purpose packages.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 08 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.12.5-10.4
- Fix CVE-2026-86144 (RHEL-256302)
- Fix CVE-2026-86140 (RHEL-256024)
- Fix CVE-2026-74860 (RHEL-255957)
- Fix CVE-2026-86142 (RHEL-256368)
- Fix CVE-2026-86143 (RHEL-256896)
- Fix CVE-2026-86138 (RHEL-256948)

Sat, 25 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.12.5-10.3
- Fix CVE-2026-11979 (RHEL-215571)

Tue, 16 Jun 2026 GMT - David King &amp;lt;dking@redhat.com&amp;gt; - 2.12.5-10.2
- Fix CVE-2025-6170 (RHEL-182007)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>unbound-devel-1.24.2-7.el10_2.6.aarch64</title>
      <pubDate>Thu, 24 Sep 2026 05:14:35 PM GMT</pubDate>
      <guid isPermaLink="false">b78f149680d2fedfecc54df2a5991dbf756b3e2227ce716afeb7053cf390859a</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/u/unbound-devel-1.24.2-7.el10_2.6.aarch64.rpm</link>
      <description><p><strong>unbound-devel</strong> - Development package that includes the unbound header files&lt;br /&gt;</p>

<p>The devel package contains the unbound library and the include files</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 21 Sep 2026 GMT - Petr Menšík &amp;lt;pemensik@redhat.com&amp;gt; - 1.24.2-23
- Prevent heap corruption during CNAME synthesis (CVE-2026-82717)

Fri, 18 Sep 2026 GMT - Petr Menšík &amp;lt;pemensik@redhat.com&amp;gt; - 1.24.2-22
- Prevent heap buffer overflow during DNSSEC canonicalization
  (CVE-2026-81634)

Fri, 18 Sep 2026 GMT - Petr Menšík &amp;lt;pemensik@redhat.com&amp;gt; - 1.24.2-21
- Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642)
- Add unit test for the vulnerability too

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-test-rpm-macros-16.15-1.el10_2.noarch</title>
      <pubDate>Tue, 22 Sep 2026 06:53:54 PM GMT</pubDate>
      <guid isPermaLink="false">dd8a666c4e10447c229bd0e91d52623d950bd40f697c2cf09937a82ef177de2e</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/p/postgresql-test-rpm-macros-16.15-1.el10_2.noarch.rpm</link>
      <description><p><strong>postgresql-test-rpm-macros</strong> - Convenience RPM macros for build-time testing against PostgreSQL server&lt;br /&gt;</p>

<p>This package is meant to be added as BuildRequires: dependency of other packages&lt;br /&gt;
that want to run build-time testsuite against running PostgreSQL server.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 07 Sep 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.15-1
- Update to 16.15

Thu, 28 May 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.14-1
- Update to 16.14
- Fix CVE-2026-6478

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>podman-tests-7:5.8.2-9.el10_2.aarch64</title>
      <pubDate>Tue, 22 Sep 2026 06:25:03 PM GMT</pubDate>
      <guid isPermaLink="false">e7ff9c8f6bfd0bdca1a9e26b1d3acb859abdb2a2d69f91f563ab4b86feb57b1a</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/p/podman-tests-5.8.2-9.el10_2.aarch64.rpm</link>
      <description><p><strong>podman-tests</strong> - Tests for podman&lt;br /&gt;</p>

<p>Tests for podman&lt;br /&gt;
&lt;br /&gt;
This package contains system tests for podman. Only intended to be used for&lt;br /&gt;
gating tests. Not supported for end users / customers.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 07 Sep 2026 GMT - Jindrich Novy &amp;lt;jnovy@redhat.com&amp;gt; - 7:5.8.2-9
- bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves:
  RHEL-250818

Thu, 03 Sep 2026 GMT - Jindrich Novy &amp;lt;jnovy@redhat.com&amp;gt; - 7:5.8.2-8
- update to the latest upstream commit 66780e9b
- Resolves: RHEL-240087

Wed, 02 Sep 2026 GMT - Jindrich Novy &amp;lt;jnovy@redhat.com&amp;gt; - 7:5.8.2-7
- Rebuild for golang CVE fixes
- Resolves: RHEL-229846 RHEL-240087 RHEL-241164 RHEL-241603 RHEL-241741 RHEL-241990 RHEL-242165 RHEL-242240 RHEL-250818 RHEL-251815

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>bind-doc-32:9.18.33-15.el10_2.11.noarch</title>
      <pubDate>Tue, 22 Sep 2026 06:23:47 PM GMT</pubDate>
      <guid isPermaLink="false">504cfc0e70f884626ff610ee2a890ce81afcb0ba62c48ce9bec62cf5bcc939df</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/b/bind-doc-9.18.33-15.el10_2.11.noarch.rpm</link>
      <description><p><strong>bind-doc</strong> - BIND 9 Administrator Reference Manual&lt;br /&gt;</p>

<p>BIND (Berkeley Internet Name Domain) is an implementation of the DNS&lt;br /&gt;
(Domain Name System) protocols. BIND includes a DNS server (named),&lt;br /&gt;
which resolves host names to IP addresses; a resolver library&lt;br /&gt;
(routines for applications to use when interfacing with DNS); and&lt;br /&gt;
tools for verifying that the DNS server is operating properly.&lt;br /&gt;
&lt;br /&gt;
This package contains BIND 9 Administrator Reference Manual&lt;br /&gt;
in HTML and PDF format.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 02 Sep 2026 GMT - Petr Menšík &amp;lt;pemensik@redhat.com&amp;gt; - 32:9.18.33-15.11
- Add new root key 38696 into package files too (RHEL-252999)

Mon, 27 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 32:9.18.33-15.10
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)

Fri, 24 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 32:9.18.33-15.9
- Reject out-of-zone NSEC next owner names (CVE-2026-13321)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>bind-devel-32:9.18.33-15.el10_2.11.aarch64</title>
      <pubDate>Tue, 22 Sep 2026 05:23:44 PM GMT</pubDate>
      <guid isPermaLink="false">8e0cab27f777edeee7fa22f79aa1a15c784a94dc0de3aaad0494d655ab96b2b8</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/b/bind-devel-9.18.33-15.el10_2.11.aarch64.rpm</link>
      <description><p><strong>bind-devel</strong> - Header files and libraries needed for bind-dyndb-ldap&lt;br /&gt;</p>

<p>The bind-devel package contains full version of the header files and libraries&lt;br /&gt;
required for building bind-dyndb-ldap. Upstream no longer supports nor recommends&lt;br /&gt;
bind libraries for third party applications.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 02 Sep 2026 GMT - Petr Menšík &amp;lt;pemensik@redhat.com&amp;gt; - 32:9.18.33-15.11
- Add new root key 38696 into package files too (RHEL-252999)

Mon, 27 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 32:9.18.33-15.10
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)

Fri, 24 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 32:9.18.33-15.9
- Reject out-of-zone NSEC next owner names (CVE-2026-13321)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openexr-devel-3.1.10-8.el10_2.4.aarch64</title>
      <pubDate>Tue, 22 Sep 2026 03:56:02 PM GMT</pubDate>
      <guid isPermaLink="false">27ca5feecf5235a1745d090ac69e04bbdd6e16bb960ce5615b8c212b8a070946</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/o/openexr-devel-3.1.10-8.el10_2.4.aarch64.rpm</link>
      <description><p><strong>openexr-devel</strong> - Development files for openexr&lt;br /&gt;</p>

<p>Development files for openexr.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 02 Sep 2026 GMT - Josef Ridky &amp;lt;jridky@redhat.com&amp;gt; - 3.1.10-8.4
- fix CVE-2026-68515

Fri, 26 Jun 2026 GMT - Josef Ridky &amp;lt;jridky@redhat.com&amp;gt; - 3.1.10-8.3
- fix CVE-2026-41142
- fix CVE-2026-42216

Tue, 28 Apr 2026 GMT - Josef Ridky &amp;lt;jridky@redhat.com&amp;gt; - 3.1.10-8.2
- fix CVE-2026-34588

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ruby-doc-3.3.12-15.el10_2.noarch</title>
      <pubDate>Tue, 22 Sep 2026 10:53:27 AM GMT</pubDate>
      <guid isPermaLink="false">290340aa00c6f9c6742056f5b48c46ad06d54abfee359642044787957d0e73f4</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/r/ruby-doc-3.3.12-15.el10_2.noarch.rpm</link>
      <description><p><strong>ruby-doc</strong> - Documentation for ruby&lt;br /&gt;</p>

<p>This package contains documentation for ruby.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 01 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 3.3.12-15
- Fix memory exhaustion via unknown DNS resource types in resolv.
  (CVE-2026-80212)
  Resolves: RHEL-252031

Thu, 23 Jul 2026 GMT - Jarek Prokop &amp;lt;jprokop@redhat.com&amp;gt; - 3.3.12-14
- Upgrade to Ruby 3.3.12.
  Resolves: RHEL-211300
  Resolves: RHEL-193659

Thu, 11 Jun 2026 GMT - Jarek Prokop &amp;lt;jprokop@redhat.com&amp;gt; - 3.3.10-13
- Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245)
  Resolves: RHEL-181687
- Fix information disclosure via MITM attack bypassing TLS in net-imap.
  (CVE-2026-42246)
  Resolves: RHEL-181775
- Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258)
  Resolves: RHEL-181797

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ruby4.0-doc-4.0.6-37.el10_2.noarch</title>
      <pubDate>Tue, 22 Sep 2026 10:53:26 AM GMT</pubDate>
      <guid isPermaLink="false">4b0a503933e9e8384dcb4b8876f80b1d7da0a0c19cc386d1e564050d5856464a</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/r/ruby4.0-doc-4.0.6-37.el10_2.noarch.rpm</link>
      <description><p><strong>ruby4.0-doc</strong> - Documentation for ruby4.0&lt;br /&gt;</p>

<p>This package contains documentation for ruby4.0.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 01 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 4.0.6-37
- Fix resolv: do not register on-demand classes for unknown DNS
  types and SvcParamKeys to prevent memory exhaustion
  (CVE-2026-80212)
  Resolves: RHEL-252032

Wed, 22 Jul 2026 GMT - Jarek Prokop &amp;lt;jprokop@redhat.com&amp;gt; - 4.0.6-36
- Upgrade to Ruby 4.0.6.
  Resolves: RHEL-211310
  Resolves: RHEL-193660

Wed, 10 Jun 2026 GMT - Tomas Juhasz &amp;lt;tjuhasz@redhat.com&amp;gt; - 4.0.3-35
- Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245)
  Includes core fix plus additional performance optimizations 
  Resolves: RHEL-181675
- Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246)
  Resolves: RHEL-181767
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258)
  Resolves: RHEL-181793

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>yggdrasil-devel-0.4.9.2-1.el10_2.3.aarch64</title>
      <pubDate>Mon, 21 Sep 2026 06:56:31 PM GMT</pubDate>
      <guid isPermaLink="false">abf52834d0f21bba6d1d893c1eca10bb84072361acd56f2ec4eba5202b91af81</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/y/yggdrasil-devel-0.4.9.2-1.el10_2.3.aarch64.rpm</link>
      <description><p><strong>yggdrasil-devel</strong> - yggdrasil development files&lt;br /&gt;</p>

<p>&lt;br /&gt;
yggdrasil is a system daemon that subscribes to topics on an MQTT broker and&lt;br /&gt;
routes any data received on the topics to an appropriate child "worker" process,&lt;br /&gt;
exchanging data with its worker processes through a D-Bus message broker.&lt;br /&gt;
&lt;br /&gt;
Contains files needed for yggdrasil worker development.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 04 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 0.4.9.2-3
- Rebuild yggdrasil against updated golang

Wed, 12 Aug 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 0.4.9.2-2
- Rebuild yggdrasil against updated golang

Mon, 13 Jul 2026 GMT - Jason Jerome &amp;lt;jajerome@redhat.com&amp;gt; - 0.4.9.2-1
- Update yggdrasil to 0.4.9.2

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>corosync-vqsim-3.1.10-1.el10_2.2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 12:55:46 PM GMT</pubDate>
      <guid isPermaLink="false">40c69abe736ea75b282257e695319f8a629e7d02e00db47334cfcda510a7f56f</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/c/corosync-vqsim-3.1.10-1.el10_2.2.aarch64.rpm</link>
      <description><p><strong>corosync-vqsim</strong> - The Corosync Cluster Engine - Votequorum Simulator&lt;br /&gt;</p>

<p>A command-line simulator for the corosync votequorum subsystem.&lt;br /&gt;
It uses the same code as the corosync quorum system but forks&lt;br /&gt;
them into subprocesses to simulate nodes.&lt;br /&gt;
Nodes can be added and removed as well as partitioned (to simulate&lt;br /&gt;
network splits)</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 04 Sep 2026 GMT - Jan Friesse &amp;lt;jfriesse@redhat.com&amp;gt; - 3.1.10-1.2
- Resolves: RHEL-251541

- totempg: Replace assert with check in deliver_fn (fixes CVE-2026-81665)

Thu, 09 Apr 2026 GMT - Jan Friesse &amp;lt;jfriesse@redhat.com&amp;gt; - 3.1.10-1.1
- Resolves: RHEL-163802
- Resolves: RHEL-163823

- totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
- totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)

Tue, 18 Nov 2025 GMT - Jan Friesse &amp;lt;jfriesse@redhat.com&amp;gt; - 3.1.10-1
- Resolves: RHEL-122945

- New upstream release (RHEL-122945)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nmstate-static-2.2.60-3.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:29:14 AM GMT</pubDate>
      <guid isPermaLink="false">9c54bf85605cdfc41f6996ecb02b7463612952dcaef5a2fb12e8f51c1b9f35d0</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/n/nmstate-static-2.2.60-3.el10_2.aarch64.rpm</link>
      <description><p><strong>nmstate-static</strong> - Static development files for nmstate&lt;br /&gt;</p>

<p>Static C library bindings for nmstate.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 04 Sep 2026 GMT - Rahul Rajesh &amp;lt;rrajesh@redhat.com&amp;gt; - 2.2.60-3
- Ignore IP addresses with non-kernel IFA_PROTO RHEL-253627

Wed, 06 May 2026 GMT - Íñigo Huguet &amp;lt;ihuguet@redhat.com&amp;gt; - 2.2.60-2
- Fix infiniband devices

Thu, 23 Apr 2026 GMT - Jan Vaclav &amp;lt;jvaclav@redhat.com&amp;gt; - 2.2.60-1
- Upgrade to 2.2.60
- ipv4: Add new parameter prefix-route-metric RHEL-170697

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nmstate-devel-2.2.60-3.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:29:14 AM GMT</pubDate>
      <guid isPermaLink="false">0d9573714e22597b04b3142b5bd6b58c22ee5a9b27fda73626860f8db2ab5fdb</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/n/nmstate-devel-2.2.60-3.el10_2.aarch64.rpm</link>
      <description><p><strong>nmstate-devel</strong> - Development files for nmstate&lt;br /&gt;</p>

<p>Development files of nmstate C binding.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 04 Sep 2026 GMT - Rahul Rajesh &amp;lt;rrajesh@redhat.com&amp;gt; - 2.2.60-3
- Ignore IP addresses with non-kernel IFA_PROTO RHEL-253627

Wed, 06 May 2026 GMT - Íñigo Huguet &amp;lt;ihuguet@redhat.com&amp;gt; - 2.2.60-2
- Fix infiniband devices

Thu, 23 Apr 2026 GMT - Jan Vaclav &amp;lt;jvaclav@redhat.com&amp;gt; - 2.2.60-1
- Upgrade to 2.2.60
- ipv4: Add new parameter prefix-route-metric RHEL-170697

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-test-libs-4.23.5-110.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:27:33 AM GMT</pubDate>
      <guid isPermaLink="false">84f854246186e393b0475a01b2393f2d6c91c5d5a74b018577c422c822116c1d</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/s/samba-test-libs-4.23.5-110.el10_2.aarch64.rpm</link>
      <description><p><strong>samba-test-libs</strong> - Libraries need by the testing tools for Samba servers and clients&lt;br /&gt;</p>

<p>samba-test-libs provides libraries required by the testing tools.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-test-4.23.5-110.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:27:33 AM GMT</pubDate>
      <guid isPermaLink="false">877adc2e1a64a4a378e97c068e3d60ad420d2660ae48ed3b800770a711f62549</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/s/samba-test-4.23.5-110.el10_2.aarch64.rpm</link>
      <description><p><strong>samba-test</strong> - Testing tools for Samba servers and clients&lt;br /&gt;</p>

<p>samba-test provides testing tools for both the server and client&lt;br /&gt;
packages of Samba.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-devel-4.23.5-110.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:27:33 AM GMT</pubDate>
      <guid isPermaLink="false">ba653632e9cbbda966f138061be7fb8ef59337967036f108485ef2df555a5a30</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/s/samba-devel-4.23.5-110.el10_2.aarch64.rpm</link>
      <description><p><strong>samba-devel</strong> - Developer tools for Samba libraries&lt;br /&gt;</p>

<p>The samba-devel package contains the header files for the libraries&lt;br /&gt;
needed to develop programs that link against the SMB, RPC and other&lt;br /&gt;
libraries in the Samba suite.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libwbclient-devel-4.23.5-110.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:27:33 AM GMT</pubDate>
      <guid isPermaLink="false">fb9ba150247cabb881e10cebbbb2c41d89e3371afb262dbadc137f11b8a8d73f</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/l/libwbclient-devel-4.23.5-110.el10_2.aarch64.rpm</link>
      <description><p><strong>libwbclient-devel</strong> - Developer tools for the winbind library&lt;br /&gt;</p>

<p>The libwbclient-devel package provides developer tools for the wbclient&lt;br /&gt;
library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libnetapi-devel-4.23.5-110.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:27:33 AM GMT</pubDate>
      <guid isPermaLink="false">0a78e4a6e8825ef02cdb0f7883c32c69a07dc3a27d8e42832533bcbb699fa583</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/l/libnetapi-devel-4.23.5-110.el10_2.aarch64.rpm</link>
      <description><p><strong>libnetapi-devel</strong> - Developer tools for the NETAPI library&lt;br /&gt;</p>

<p>The libnetapi-devel package contains the header files and libraries needed to&lt;br /&gt;
develop programs that link against the NETAPI library in the Samba suite.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libldb-devel-4.23.5-110.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:27:33 AM GMT</pubDate>
      <guid isPermaLink="false">9a35c62b2e651c0d4e72a895a505ba10b8db619622ce883c8cd8da4113b89ee1</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/l/libldb-devel-4.23.5-110.el10_2.aarch64.rpm</link>
      <description><p><strong>libldb-devel</strong> - Developer tools for the LDB library&lt;br /&gt;</p>

<p>Header files needed to develop programs that link against the LDB library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-samba-test-4.23.5-110.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:27:33 AM GMT</pubDate>
      <guid isPermaLink="false">d8ab3eb34b1e2093474a4b711a06a94ea0af9932118f8c38eacead67e6581c42</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/p/python3-samba-test-4.23.5-110.el10_2.aarch64.rpm</link>
      <description><p><strong>python3-samba-test</strong> - Samba Python libraries&lt;br /&gt;</p>

<p>The python3-samba-test package contains the Python libraries used by the test suite of Samba.&lt;br /&gt;
If you want to run full set of Samba tests, you need to install this package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libsmbclient-devel-4.23.5-110.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:27:33 AM GMT</pubDate>
      <guid isPermaLink="false">3496643f6c9186585fca1dc2fc3f38f3fd49659ec092d104d9d55c567181099f</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/l/libsmbclient-devel-4.23.5-110.el10_2.aarch64.rpm</link>
      <description><p><strong>libsmbclient-devel</strong> - Developer tools for the SMB client library&lt;br /&gt;</p>

<p>The libsmbclient-devel package contains the header files and libraries needed&lt;br /&gt;
to develop programs that link against the SMB client library in the Samba&lt;br /&gt;
suite.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-pidl-4.23.5-110.el10_2.noarch</title>
      <pubDate>Wed, 16 Sep 2026 09:27:18 AM GMT</pubDate>
      <guid isPermaLink="false">0ca73249f655b8551b494f6bf0e807e0c5305138352bdb45ce36f35cbb4f62cd</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/s/samba-pidl-4.23.5-110.el10_2.noarch.rpm</link>
      <description><p><strong>samba-pidl</strong> - Perl IDL compiler&lt;br /&gt;</p>

<p>The samba-pidl package contains the Perl IDL compiler used by Samba&lt;br /&gt;
and Wireshark to parse IDL and similar protocols</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gdm-pam-extensions-devel-1:47.0-24.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:23:30 AM GMT</pubDate>
      <guid isPermaLink="false">274366b88cc543f27b6581cefb93ba20aa949194e7b5f2a38b959b9c7e022d16</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/g/gdm-pam-extensions-devel-47.0-24.el10_2.aarch64.rpm</link>
      <description><p><strong>gdm-pam-extensions-devel</strong> - Macros for developing GDM extensions to PAM&lt;br /&gt;</p>

<p>The gdm-pam-extensions-devel package contains headers and other&lt;br /&gt;
files that are helpful to PAM modules wishing to support&lt;br /&gt;
GDM specific authentication features.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 04 Sep 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-24
- Fix crash in session-settings related with ActUser

Fri, 04 Sep 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-23
- Update unified authentication patch to drop passkey/web auth settings

Fri, 10 Jul 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-22
- Fix auth bypass in authselect pam substacks

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gdm-devel-1:47.0-24.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:23:30 AM GMT</pubDate>
      <guid isPermaLink="false">42bf6c657a77f230c8923aadeab92d7ae28bc65abe121cd13b11faf1f96944f3</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/g/gdm-devel-47.0-24.el10_2.aarch64.rpm</link>
      <description><p><strong>gdm-devel</strong> - Development files for gdm&lt;br /&gt;</p>

<p>The gdm-devel package contains headers and other&lt;br /&gt;
files needed to build custom greeters.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 04 Sep 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-24
- Fix crash in session-settings related with ActUser

Fri, 04 Sep 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-23
- Update unified authentication patch to drop passkey/web auth settings

Fri, 10 Jul 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 1:47.0-22
- Fix auth bypass in authselect pam substacks

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cifs-utils-devel-7.7-1.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:22:38 AM GMT</pubDate>
      <guid isPermaLink="false">f70d67288dc8ee40593cba834d58fc45d7beaf3fb7a2eea382eae2b395200ffb</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/c/cifs-utils-devel-7.7-1.el10_2.aarch64.rpm</link>
      <description><p><strong>cifs-utils-devel</strong> - Files needed for building plugins for cifs-utils&lt;br /&gt;</p>

<p>The SMB/CIFS protocol is a standard file sharing protocol widely deployed&lt;br /&gt;
on Microsoft Windows machines. This package contains the header file&lt;br /&gt;
necessary for building ID mapping plugins for cifs-utils.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 25 Aug 2026 GMT - Paulo Alcantara &amp;lt;paalcant@redhat.com&amp;gt; - 7.7-1
- resolves: RHEL-247581 - fix krb5 regression with --trust-dns

Tue, 07 Jul 2026 GMT - Paulo Alcantara &amp;lt;paalcant@redhat.com&amp;gt; - 7.6-2
- resolves: RHEL-192935 - fix krb5 mount regression

Thu, 25 Jun 2026 GMT - Paulo Alcantara &amp;lt;paalcant@redhat.com&amp;gt; - 7.6-1
- Update to version 7.6
- resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cairo-tools-1.18.2-2.el10_2.1.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 09:12:14 AM GMT</pubDate>
      <guid isPermaLink="false">14edcee12a4100c3dfc12fdfba24d586eeea8fd705690f8c817703f2a3ff5b66</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/c/cairo-tools-1.18.2-2.el10_2.1.aarch64.rpm</link>
      <description><p><strong>cairo-tools</strong> - Development tools for cairo&lt;br /&gt;</p>

<p>Cairo is a 2D graphics library designed to provide high-quality display&lt;br /&gt;
and print output.&lt;br /&gt;
&lt;br /&gt;
This package contains tools for working with the cairo graphics library.&lt;br /&gt;
 * cairo-trace: Record cairo library calls for later playback</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 19 Aug 2026 GMT - Benjamin Otte &amp;lt;botte@redhat.com&amp;gt; - 1.18.2-2.1
- Backport an upstream patch to fix printing PDFs
- Resolves: RHEL-238394

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.18.2-2
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Tue, 10 Sep 2024 GMT - Matthias Clasen &amp;lt;mclasen@redhat.com&amp;gt; - 1.18.2-1
- Update to 1.18.2

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-9.0-source-built-artifacts-9.0.121-1.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 07:56:07 AM GMT</pubDate>
      <guid isPermaLink="false">0f99edc750ed5df253ffd14aa14763770030dbe19785b9a60bd720070447e2d8</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/d/dotnet-sdk-9.0-source-built-artifacts-9.0.121-1.el10_2.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-9.0-source-built-artifacts</strong> - Internal package for building .NET 9.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET source-built archive is a collection of packages needed&lt;br /&gt;
to build the .NET SDK itself.&lt;br /&gt;
&lt;br /&gt;
These are not meant for general use.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 02 Sep 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.121-1
- Update to .NET SDK 9.0.121 and Runtime 9.0.20
- Resolves: RHEL-252279

Sun, 09 Aug 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.120-1
- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477

Wed, 08 Jul 2026 GMT - Satish Mane &amp;lt;satmane@redhat.com&amp;gt; - 9.0.119-1
- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-10.0-source-built-artifacts-10.0.112-1.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 07:44:23 AM GMT</pubDate>
      <guid isPermaLink="false">fe0736625821e07305371135aea46d34be32231388b4b87dbc71b602e20e754d</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/d/dotnet-sdk-10.0-source-built-artifacts-10.0.112-1.el10_2.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-10.0-source-built-artifacts</strong> - Internal package for building .NET 10.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET source-built archive is a collection of packages needed&lt;br /&gt;
to build the .NET SDK itself.&lt;br /&gt;
&lt;br /&gt;
These are not meant for general use.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 02 Sep 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.112-1
- Update to .NET SDK 10.0.112 and Runtime 10.0.12
- Resolves: RHEL-252320

Sun, 09 Aug 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.111-1
- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482

Wed, 08 Jul 2026 GMT - Satish Mane &amp;lt;satmane@redhat.com&amp;gt; - 10.0.110-1
- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-8.0-source-built-artifacts-8.0.131-1.el10_2.aarch64</title>
      <pubDate>Wed, 16 Sep 2026 07:43:05 AM GMT</pubDate>
      <guid isPermaLink="false">829a868419f8a63b7cd8522830e50d0a528588b2c16febcc3c7b76bef4e5f16c</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/d/dotnet-sdk-8.0-source-built-artifacts-8.0.131-1.el10_2.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-8.0-source-built-artifacts</strong> - Internal package for building .NET 8.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET source-built archive is a collection of packages needed&lt;br /&gt;
to build the .NET SDK itself.&lt;br /&gt;
&lt;br /&gt;
These are not meant for general use.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 02 Sep 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.131-1
- Update to .NET SDK 8.0.131 and Runtime 8.0.31
- Resolves: RHEL-252248

Sun, 09 Aug 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.130-1
- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472

Wed, 08 Jul 2026 GMT - Satish Mane &amp;lt;satmane@redhat.com&amp;gt; - 8.0.129-1
- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nginx-mod-devel-2:1.26.3-6.el10_2.7.aarch64</title>
      <pubDate>Mon, 14 Sep 2026 02:44:15 PM GMT</pubDate>
      <guid isPermaLink="false">2e77e3c519e3a042b6ffdba216905ef476c8c5f4f5949000aaf3d8ffd2b05b30</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/n/nginx-mod-devel-1.26.3-6.el10_2.7.aarch64.rpm</link>
      <description><p><strong>nginx-mod-devel</strong> - Nginx module development files&lt;br /&gt;</p>

<p>Nginx module development files.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 08 Sep 2026 GMT - Luboš Uhliarik &amp;lt;luhliari@redhat.com&amp;gt; - 2:1.26.3-6.7
- Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted
  HTTP requests (CVE-2026-42533)

Thu, 30 Jul 2026 GMT - Luboš Uhliarik &amp;lt;luhliari@redhat.com&amp;gt; - 2:1.26.3-6.6
- Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory
  modification or denial of service (CVE-2026-56434)
- Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service
  in ngx_http_slice_module (CVE-2026-60005)

Fri, 03 Jul 2026 GMT - Luboš Uhliarik &amp;lt;luhliari@redhat.com&amp;gt; - 2:1.26.3-6.5
- Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI
  causing crashes
- Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or.
  Denial of Service via heap-based buffer overflow with crafted HTTP/2
  headers (CVE-2026-42055)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rust-std-static-aarch64-unknown-none-softfloat-1.92.0-2.el10_2.aarch64</title>
      <pubDate>Mon, 14 Sep 2026 01:34:29 PM GMT</pubDate>
      <guid isPermaLink="false">0beadf726d599e517be9b184979dea1b12055636fac1d964c084e8d7749d9b4b</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/r/rust-std-static-aarch64-unknown-none-softfloat-1.92.0-2.el10_2.aarch64.rpm</link>
      <description><p><strong>rust-std-static-aarch64-unknown-none-softfloat</strong> - Standard library for Rust aarch64-unknown-none-softfloat&lt;br /&gt;</p>

<p>This package includes the standard libraries for building applications&lt;br /&gt;
written in Rust for the embedded target aarch64-unknown-none-softfloat.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 27 Aug 2026 GMT - Paul Murphy &amp;lt;murp@redhat.com&amp;gt; - 1.92.0-2
- Apply libgit2 fix for CVE-2026-53587

Wed, 07 Jan 2026 GMT - Josh Stone &amp;lt;jistone@redhat.com&amp;gt; - 1.92.0-1
- Update to Rust 1.92.0

Wed, 05 Nov 2025 GMT - Paul Murphy &amp;lt;murp@redhat.com&amp;gt; - 1.91.0-1
- Update to Rust 1.91.0

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql18-test-rpm-macros-18.6-1.el10_2.noarch</title>
      <pubDate>Mon, 14 Sep 2026 11:30:39 AM GMT</pubDate>
      <guid isPermaLink="false">0c965c92561aa4499435879bc1bc36f190049d6e63b470b774cc57be682c2d81</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/p/postgresql18-test-rpm-macros-18.6-1.el10_2.noarch.rpm</link>
      <description><p><strong>postgresql18-test-rpm-macros</strong> - Convenience RPM macros for build-time testing against PostgreSQL server&lt;br /&gt;</p>

<p>This package is meant to be added as BuildRequires: dependency of other packages&lt;br /&gt;
that want to run build-time testsuite against running PostgreSQL server.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 07 Sep 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 18.6-1
- Update to 18.6
- Fix CVE-2026-18408
- Fix CVE-2026-6464

Thu, 28 May 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 18.4-1
- Update to 18.4
- Fix CVE-2026-6478

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 18.3-1
- Update to 18.3
- Enable pltcl
- Update gating configuration
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
- Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tesseract-devel-5.3.4-7.el10_2.aarch64</title>
      <pubDate>Fri, 11 Sep 2026 05:06:06 PM GMT</pubDate>
      <guid isPermaLink="false">2bfcebdf316f15abf687f510d0331d8dc27b094a25b0588de7e8dd64088ca528</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/t/tesseract-devel-5.3.4-7.el10_2.aarch64.rpm</link>
      <description><p><strong>tesseract-devel</strong> - Development files for tesseract&lt;br /&gt;</p>

<p>The tesseract-devel package contains header file for&lt;br /&gt;
developing applications that use tesseract.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 25 Aug 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 5.3.4-7
- Resolves: CVE-2026-73066

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 5.3.4-6
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qt6-qt5compat-examples-6.10.1-1.el10_2.1.aarch64</title>
      <pubDate>Wed, 09 Sep 2026 11:12:43 AM GMT</pubDate>
      <guid isPermaLink="false">b7dce2a242f4d54e5fdfb8a6337327a38e3376b73645ef657896bc43c3da4ed9</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/q/qt6-qt5compat-examples-6.10.1-1.el10_2.1.aarch64.rpm</link>
      <description><p><strong>qt6-qt5compat-examples</strong> - Programming examples for qt6-qt5compat&lt;br /&gt;</p>

<p>Programming examples for qt6-qt5compat.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 25 Aug 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 6.10.1-1.1
- Fix out-of-bounds read in QTextCodec::codecForName() (CVE-2026-9499)
  Resolves: RHEL-247204

Mon, 24 Nov 2025 GMT - Jan Grulich &amp;lt;jgrulich@redhat.com&amp;gt; - 6.10.1-1
- 6.10.1
  Resolves: RHEL-109197

Fri, 06 Jun 2025 GMT - Jan Grulich &amp;lt;jgrulich@redhat.com&amp;gt; - 6.9.1-2
- Rebuild (broken buildroot)
  Resolves: RHEL-78530

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glib2-static-2.80.4-12.el10_2.22.aarch64</title>
      <pubDate>Tue, 08 Sep 2026 08:54:34 AM GMT</pubDate>
      <guid isPermaLink="false">792a63ca4e0de1d92fa79cd9213db5b7f5d4c1f7cbbe2780c2e75e7c3c4b3ef6</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/g/glib2-static-2.80.4-12.el10_2.22.aarch64.rpm</link>
      <description><p><strong>glib2-static</strong> - glib static&lt;br /&gt;</p>

<p>The glib2-static subpackage contains static libraries for glib2.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 31 Aug 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.80.4-22
- Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap

Thu, 30 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.80.4-21
- Fix CVE-2026-15588: limit D-Bus auth line read length

Thu, 30 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.80.4-20
- Fix CVE-2026-58011: range validation in g_date_time_add_full()

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glib2-doc-2.80.4-12.el10_2.22.aarch64</title>
      <pubDate>Tue, 08 Sep 2026 08:54:34 AM GMT</pubDate>
      <guid isPermaLink="false">2d9f7cedbc675f64583a242d0efc5a63d74521a1aac681635ac960bab90af0ba</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/g/glib2-doc-2.80.4-12.el10_2.22.aarch64.rpm</link>
      <description><p><strong>glib2-doc</strong> - A library of handy utility functions&lt;br /&gt;</p>

<p>The glib2-doc package includes documentation for the GLib library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 31 Aug 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.80.4-22
- Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap

Thu, 30 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.80.4-21
- Fix CVE-2026-15588: limit D-Bus auth line read length

Thu, 30 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.80.4-20
- Fix CVE-2026-58011: range validation in g_date_time_add_full()

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>389-ds-base-devel-3.2.0-10.el10_2.aarch64</title>
      <pubDate>Tue, 08 Sep 2026 08:50:55 AM GMT</pubDate>
      <guid isPermaLink="false">cd28d65d71e7e9d1bbe548a9e78ffa37f6c5d5aa5446bbde9e19743bf60cad19</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/3/389-ds-base-devel-3.2.0-10.el10_2.aarch64.rpm</link>
      <description><p><strong>389-ds-base-devel</strong> - Development libraries for 389 Directory Server (base)&lt;br /&gt;</p>

<p>Development Libraries and headers for the 389 Directory Server base package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 02 Sep 2026 GMT - Viktor Ashirov &amp;lt;vashirov@redhat.com&amp;gt; - 3.2.0-10
- Bump version to 3.2.0-10
- Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow
  via SASL wrapped-record length lower-bound underflow in
  sasl_io_start_packet() [rhel-10.2.z]
- Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication
  NULL pointer dereference via paged results and USE_ONE_BACKEND control in
  op_shared_search [rhel-10.2.z]
- Resolves: RHEL-232863 -  CVE-2026-18922 389-ds-base: SASL PLAIN
  authentication allows privilege escalation to Directory Manager via stale
  identity in Cyrus SASL auxiliary property [rhel-10.2.z]
- Resolves: RHEL-244470 - lib389: set nsDS5ReplicaBindDNGroup before
  ensure_agreement() [rhel-10.2.z]
- Resolves: RHEL-245372 - CVE-2026-76560 389-ds-base: anonymous LDAP client
  can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-10.2.z]
- Resolves: RHEL-247859 - CVE-2026-78701 389-ds-base: CVE-2026-11610
  incomplete fix may introduce a connection-stall DoS [rhel-10.2.z]
- Resolves: RHEL-248770 - CVE-2026-11770 fix breaks replication total init
  when nsDS5ReplicaBindDNGroup is set after agreement creation
  [rhel-10.2.z]

Wed, 29 Jul 2026 GMT - Viktor Ashirov &amp;lt;vashirov@redhat.com&amp;gt; - 3.2.0-9
- Bump version to 3.2.0-9
- Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth
  LDAP filter injection in CleanAllRUV status check [rhel-10.2.z]
- Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
  pointer dereference in deref control plugin BER parser [rhel-10.2.z]
- Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-
  authentication stack buffer overflow in get_ruvelement_from_berval() via
  unbounded replica ID parsing [rhel-10.2.z]

Fri, 26 Jun 2026 GMT - Viktor Ashirov &amp;lt;vashirov@redhat.com&amp;gt; - 3.2.0-8
- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>389-ds-base-bdb-3.2.0-10.el10_2.aarch64</title>
      <pubDate>Tue, 08 Sep 2026 08:50:55 AM GMT</pubDate>
      <guid isPermaLink="false">a309df863c3438ea47f5f250b2e8e100e968a9c0d49d708e772445b9acccc1ca</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/CRB/aarch64/os/Packages/3/389-ds-base-bdb-3.2.0-10.el10_2.aarch64.rpm</link>
      <description><p><strong>389-ds-base-bdb</strong> - Berkeley Database backend for 389 Directory Server&lt;br /&gt;</p>

<p>Berkeley Database backend for 389 Directory Server&lt;br /&gt;
Warning! This backend is deprecated in favor of lmdb and its support&lt;br /&gt;
may be removed in future versions.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 02 Sep 2026 GMT - Viktor Ashirov &amp;lt;vashirov@redhat.com&amp;gt; - 3.2.0-10
- Bump version to 3.2.0-10
- Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow
  via SASL wrapped-record length lower-bound underflow in
  sasl_io_start_packet() [rhel-10.2.z]
- Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication
  NULL pointer dereference via paged results and USE_ONE_BACKEND control in
  op_shared_search [rhel-10.2.z]
- Resolves: RHEL-232863 -  CVE-2026-18922 389-ds-base: SASL PLAIN
  authentication allows privilege escalation to Directory Manager via stale
  identity in Cyrus SASL auxiliary property [rhel-10.2.z]
- Resolves: RHEL-244470 - lib389: set nsDS5ReplicaBindDNGroup before
  ensure_agreement() [rhel-10.2.z]
- Resolves: RHEL-245372 - CVE-2026-76560 389-ds-base: anonymous LDAP client
  can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-10.2.z]
- Resolves: RHEL-247859 - CVE-2026-78701 389-ds-base: CVE-2026-11610
  incomplete fix may introduce a connection-stall DoS [rhel-10.2.z]
- Resolves: RHEL-248770 - CVE-2026-11770 fix breaks replication total init
  when nsDS5ReplicaBindDNGroup is set after agreement creation
  [rhel-10.2.z]

Wed, 29 Jul 2026 GMT - Viktor Ashirov &amp;lt;vashirov@redhat.com&amp;gt; - 3.2.0-9
- Bump version to 3.2.0-9
- Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth
  LDAP filter injection in CleanAllRUV status check [rhel-10.2.z]
- Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
  pointer dereference in deref control plugin BER parser [rhel-10.2.z]
- Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-
  authentication stack buffer overflow in get_ruvelement_from_berval() via
  unbounded replica ID parsing [rhel-10.2.z]

Fri, 26 Jun 2026 GMT - Viktor Ashirov &amp;lt;vashirov@redhat.com&amp;gt; - 3.2.0-8
- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]

...&lt;/pre&gt;</description>
    </item>
  </channel>
</rss>
