<?xml version="1.0" ?>
<rss version="2.0">
  <channel>
    <title>Rocky Linux 10 s390x BaseOS</title>
    <link>https://rockylinux.org</link>
    <description>Recently updated packages for Rocky Linux 10 s390x BaseOS</description>
    <pubDate>Mon, 05 Oct 2026 03:05:56 PM GMT</pubDate>
    <generator>DNF</generator>
    <item>
      <title>libpcap-14:1.10.4-7.el10_2.1.s390x</title>
      <pubDate>Thu, 01 Oct 2026 11:08:25 AM GMT</pubDate>
      <guid isPermaLink="false">9a5079bbffd1e53c399ae455a81cdd921d9659a79e3f448942a5180dbdbc9db6</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libpcap-1.10.4-7.el10_2.1.s390x.rpm</link>
      <description><p><strong>libpcap</strong> - A system-independent interface for user-level packet capture&lt;br /&gt;</p>

<p>Libpcap provides a portable framework for low-level network&lt;br /&gt;
monitoring.  Libpcap can provide network statistics collection,&lt;br /&gt;
security monitoring and network debugging.  Since almost every system&lt;br /&gt;
vendor provides a different interface for packet capture, the libpcap&lt;br /&gt;
authors created this system-independent API to ease in porting and to&lt;br /&gt;
alleviate the need for several system-dependent packet capture modules&lt;br /&gt;
in each application.&lt;br /&gt;
&lt;br /&gt;
Install libpcap if you need to do low-level network traffic monitoring&lt;br /&gt;
on your network.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 09 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 14:1.10.4-7.1
- Fix CVE-2026-0799: validate BPF scratch memory register indices
  in the BPF interpreter to prevent out-of-bounds memory access
  Resolves: RHEL-256921

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 14:1.10.4-7
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openssh-server-9.9p1-28.el10_2.rocky.0.1.s390x</title>
      <pubDate>Wed, 30 Sep 2026 09:17:27 PM GMT</pubDate>
      <guid isPermaLink="false">8f1e76bcb10259c21086f3e8e01e640f2d68032c727504b8d47b678ff27f0092</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/o/openssh-server-9.9p1-28.el10_2.rocky.0.1.s390x.rpm</link>
      <description><p><strong>openssh-server</strong> - An open source SSH server daemon&lt;br /&gt;</p>

<p>OpenSSH is a free version of SSH (Secure SHell), a program for logging&lt;br /&gt;
into and executing commands on a remote machine. This package contains&lt;br /&gt;
the secure shell daemon (sshd). The sshd daemon allows SSH clients to&lt;br /&gt;
securely connect to your SSH server.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 30 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 9.9p1-28.rocky.0.1
- Remove Red Hat message

Mon, 21 Sep 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-28
- CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive
  authentication where the minimum per-attempt delay was not being enforced
  Resolves: RHEL-258463

Fri, 21 Aug 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-27
- CVE-2026-73283: Complete the fix of security bypass due to incorrect
  handling of forwarding and tunneling options
  Resolves: RHEL-245413
- CVE-2026-73281: Fix misinteraction between agent locking and
  the session-bind@openssh.com extension
  Resolves: RHEL-245423
- CVE-2026-73282: Fix information disclosure and data corruption
  via use-after-free in ssh client
  Resolves: RHEL-245418

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openssh-keycat-9.9p1-28.el10_2.rocky.0.1.s390x</title>
      <pubDate>Wed, 30 Sep 2026 09:17:27 PM GMT</pubDate>
      <guid isPermaLink="false">576274c7797eaaf1907c42f16140ddd89263a0339de375df6e04245f2b380674</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/o/openssh-keycat-9.9p1-28.el10_2.rocky.0.1.s390x.rpm</link>
      <description><p><strong>openssh-keycat</strong> - A mls keycat backend for openssh&lt;br /&gt;</p>

<p>OpenSSH mls keycat is backend for using the authorized keys in the&lt;br /&gt;
openssh in the mls mode.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 30 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 9.9p1-28.rocky.0.1
- Remove Red Hat message

Mon, 21 Sep 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-28
- CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive
  authentication where the minimum per-attempt delay was not being enforced
  Resolves: RHEL-258463

Fri, 21 Aug 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-27
- CVE-2026-73283: Complete the fix of security bypass due to incorrect
  handling of forwarding and tunneling options
  Resolves: RHEL-245413
- CVE-2026-73281: Fix misinteraction between agent locking and
  the session-bind@openssh.com extension
  Resolves: RHEL-245423
- CVE-2026-73282: Fix information disclosure and data corruption
  via use-after-free in ssh client
  Resolves: RHEL-245418

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openssh-clients-9.9p1-28.el10_2.rocky.0.1.s390x</title>
      <pubDate>Wed, 30 Sep 2026 09:17:27 PM GMT</pubDate>
      <guid isPermaLink="false">6b778c3f561a351a1b5659b19af3a44c88ffe4591e81916f643c41edfb2288ab</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/o/openssh-clients-9.9p1-28.el10_2.rocky.0.1.s390x.rpm</link>
      <description><p><strong>openssh-clients</strong> - An open source SSH client applications&lt;br /&gt;</p>

<p>OpenSSH is a free version of SSH (Secure SHell), a program for logging&lt;br /&gt;
into and executing commands on a remote machine. This package includes&lt;br /&gt;
the clients necessary to make encrypted connections to SSH servers.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 30 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 9.9p1-28.rocky.0.1
- Remove Red Hat message

Mon, 21 Sep 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-28
- CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive
  authentication where the minimum per-attempt delay was not being enforced
  Resolves: RHEL-258463

Fri, 21 Aug 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-27
- CVE-2026-73283: Complete the fix of security bypass due to incorrect
  handling of forwarding and tunneling options
  Resolves: RHEL-245413
- CVE-2026-73281: Fix misinteraction between agent locking and
  the session-bind@openssh.com extension
  Resolves: RHEL-245423
- CVE-2026-73282: Fix information disclosure and data corruption
  via use-after-free in ssh client
  Resolves: RHEL-245418

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openssh-9.9p1-28.el10_2.rocky.0.1.s390x</title>
      <pubDate>Wed, 30 Sep 2026 09:17:27 PM GMT</pubDate>
      <guid isPermaLink="false">5bdf3fdfee786636f62cd54e3b87c2ae55efd8d8cae9db6a00f7cd41a08027f2</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/o/openssh-9.9p1-28.el10_2.rocky.0.1.s390x.rpm</link>
      <description><p><strong>openssh</strong> - An open source implementation of SSH protocol version 2&lt;br /&gt;</p>

<p>SSH (Secure SHell) is a program for logging into and executing&lt;br /&gt;
commands on a remote machine. SSH is intended to replace rlogin and&lt;br /&gt;
rsh, and to provide secure encrypted communications between two&lt;br /&gt;
untrusted hosts over an insecure network. X11 connections and&lt;br /&gt;
arbitrary TCP/IP ports can also be forwarded over the secure channel.&lt;br /&gt;
&lt;br /&gt;
OpenSSH is OpenBSD's version of the last free version of SSH, bringing&lt;br /&gt;
it up to date in terms of security and features.&lt;br /&gt;
&lt;br /&gt;
This package includes the core files necessary for both the OpenSSH&lt;br /&gt;
client and server. To make this package useful, you should also&lt;br /&gt;
install openssh-clients, openssh-server, or both.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 30 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 9.9p1-28.rocky.0.1
- Remove Red Hat message

Mon, 21 Sep 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-28
- CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive
  authentication where the minimum per-attempt delay was not being enforced
  Resolves: RHEL-258463

Fri, 21 Aug 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-27
- CVE-2026-73283: Complete the fix of security bypass due to incorrect
  handling of forwarding and tunneling options
  Resolves: RHEL-245413
- CVE-2026-73281: Fix misinteraction between agent locking and
  the session-bind@openssh.com extension
  Resolves: RHEL-245423
- CVE-2026-73282: Fix information disclosure and data corruption
  via use-after-free in ssh client
  Resolves: RHEL-245418

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>expat-2.7.3-1.el10_2.5.s390x</title>
      <pubDate>Wed, 30 Sep 2026 09:15:59 PM GMT</pubDate>
      <guid isPermaLink="false">ae401c7fdb69f6a8d8f5343da7f058fd0cfb52726a3f8b82a40a943f9e01741c</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/e/expat-2.7.3-1.el10_2.5.s390x.rpm</link>
      <description><p><strong>expat</strong> - An XML parser library&lt;br /&gt;</p>

<p>This is expat, the C library for parsing XML, written by James Clark. Expat&lt;br /&gt;
is a stream oriented XML parser. This means that you register handlers with&lt;br /&gt;
the parser prior to starting the parse. These handlers are called when the&lt;br /&gt;
parser discovers the associated structures in the document being parsed. A&lt;br /&gt;
start tag is an example of the kind of structures for which you may&lt;br /&gt;
register handlers.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.7.3-61
- CVE-2026-66046 expat: Expat: Denial of Service via quadratic complexity
  in attribute processing

Tue, 29 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.7.3-60
- CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input

Fri, 31 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.7.3-59
- Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gawk-5.3.0-6.el10_2.1.s390x</title>
      <pubDate>Wed, 30 Sep 2026 01:48:41 AM GMT</pubDate>
      <guid isPermaLink="false">4f7077946151b46f32015e835b05a95704816e38fc8cfbbeb3c0e8bae5887782</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/g/gawk-5.3.0-6.el10_2.1.s390x.rpm</link>
      <description><p><strong>gawk</strong> - The GNU version of the AWK text processing utility&lt;br /&gt;</p>

<p>The gawk package contains the GNU version of AWK text processing utility. AWK is&lt;br /&gt;
a programming language designed for text processing and typically used as a data&lt;br /&gt;
extraction and reporting tool.&lt;br /&gt;
&lt;br /&gt;
The gawk utility can be used to do quick and easy text pattern matching,&lt;br /&gt;
extracting or reformatting. It is considered to be a standard Linux tool for&lt;br /&gt;
text processing.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 21 Aug 2026 GMT - Jakub Martisko &amp;lt;jamartis@redhat.com&amp;gt; - 5.3.0-6.1
- Fix use after free in io.c
- Fix buffer overflow in extensions/readdir.c
- Fix integer overflow in buildin.c
Resolves: CVE-2026-40467
Resolves: CVE-2026-40468
Resolves: CVE-2026-40553

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 5.3.0-6
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-abi-stablelists-6.12.0-211.61.1.el10_2.noarch</title>
      <pubDate>Tue, 29 Sep 2026 01:08:13 PM GMT</pubDate>
      <guid isPermaLink="false">f11d65e456637f2d94a07a70c6bc849a4a5a0b092711a035af77e927c706a9ba</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-abi-stablelists-6.12.0-211.61.1.el10_2.noarch.rpm</link>
      <description><p><strong>kernel-abi-stablelists</strong> - The Rocky Linux kernel ABI symbol stablelists&lt;br /&gt;</p>

<p>The kABI package contains information pertaining to the Rocky Linux&lt;br /&gt;
kernel ABI, including lists of kernel symbols that are needed by&lt;br /&gt;
external Linux kernel modules, and a yum plugin to aid enforcement.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">dc9262c0389fba83871a365ff6746e7c553f222032d3b4eba94dbb0c4705e100</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel</strong> - The Linux kernel&lt;br /&gt;</p>

<p>The kernel meta package</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-modules-core-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">7812fa6d5f78037b3b0ca8e64c4086b4ed0c572b2f0516266448c2ae3ca8aa12</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-modules-core-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-modules-core</strong> - Core kernel modules to match the core kernel&lt;br /&gt;</p>

<p>This package provides essential kernel modules for the core kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-debug-core-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">ac403f9ab635eb5a43de197866bc483abce98b998d24759af03bc535752bc6dd</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-debug-core-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-debug-core</strong> - The Linux kernel compiled for zfcpdump usage&lt;br /&gt;</p>

<p>The kernel package contains the Linux kernel (vmlinuz), the core of any&lt;br /&gt;
Linux operating system.  The kernel handles the basic functions&lt;br /&gt;
of the operating system:  memory allocation, process allocation, device&lt;br /&gt;
input and output, etc.&lt;br /&gt;
&lt;br /&gt;
This variant of the kernel has numerous debugging options enabled.&lt;br /&gt;
It should only be installed when trying to gather additional information&lt;br /&gt;
on kernel bugs, as some of these options impact performance noticably.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-zfcpdump-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">5b82318c90b2815b55a7c1e980e540fec0b864cade402099a4a126aa56764131</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-zfcpdump-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-zfcpdump</strong> - kernel meta-package for the zfcpdump kernel&lt;br /&gt;</p>

<p>The meta-package for the zfcpdump kernel</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-modules-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">8fabc874f0d7fc1b33177bc5a3a32e346473a4fd1b76f3732b025de424be167c</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-modules-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-modules</strong> - kernel modules to match the core kernel&lt;br /&gt;</p>

<p>This package provides commonly used kernel modules for the core kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-zfcpdump-modules-extra-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">1ae79c61e44e1e80d070d756d92126440b1d59cee6836ba498f6900f024ecda9</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-zfcpdump-modules-extra-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-zfcpdump-modules-extra</strong> - Extra kernel modules to match the kernel&lt;br /&gt;</p>

<p>This package provides less commonly used kernel modules for the kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-debug-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">e1cd2aeea8e99d31acd482d0b5d1f79462248c01dbf7ddc3bfc9f725685aa7c9</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-debug-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-debug</strong> - kernel meta-package for the debug kernel&lt;br /&gt;</p>

<p>The meta-package for the debug kernel</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-tools-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">3b558fe67102c3276a11d47aebc907762d19fa5fe4112f450b55f925179d2ff3</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-tools-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-tools</strong> - Assortment of tools for the Linux kernel&lt;br /&gt;</p>

<p>This package contains the tools/ directory from the kernel source&lt;br /&gt;
and the supporting documentation.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-debug-modules-extra-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">81d7bbc3d055edeb20e0d50bd120856c0c51820ba99034db9a028a87c7950b3e</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-debug-modules-extra-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-debug-modules-extra</strong> - Extra kernel modules to match the kernel&lt;br /&gt;</p>

<p>This package provides less commonly used kernel modules for the kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-zfcpdump-modules-core-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">e3716cdd061fd7db61e925fa00ed3ad700af4aace8eaaca2e9ab28e807048c5d</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-zfcpdump-modules-core-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-zfcpdump-modules-core</strong> - Core kernel modules to match the core kernel&lt;br /&gt;</p>

<p>This package provides essential kernel modules for the core kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-core-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">afdaab933f01df4b6c998eddb46f89cfffc05c54899966ad0a597c770aeb2531</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-core-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-core</strong> - The Linux kernel&lt;br /&gt;</p>

<p>The kernel package contains the Linux kernel (vmlinuz), the core of any&lt;br /&gt;
Linux operating system.  The kernel handles the basic functions&lt;br /&gt;
of the operating system: memory allocation, process allocation, device&lt;br /&gt;
input and output, etc.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-modules-extra-matched-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">1bc355c51627cb39da6275024702ed69b6edfb6e32d94810f6edb257a678a260</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-modules-extra-matched-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-modules-extra-matched</strong> - Meta package which requires modules-extra to be installed for all kernels.&lt;br /&gt;</p>

<p>This meta package provides a single reference that other packages can Require to have modules-extra installed for all kernels.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-debug-modules-core-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">eb40f46d358a4a81af6d9274c3388e5787aa6f999022f98f283b7d4f8ef35073</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-debug-modules-core-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-debug-modules-core</strong> - Core kernel modules to match the core kernel&lt;br /&gt;</p>

<p>This package provides essential kernel modules for the core kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-zfcpdump-modules-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">822589b0b08ca47f45148d6d2afcfea0b0e44605753251d53693be57e95e90e5</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-zfcpdump-modules-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-zfcpdump-modules</strong> - kernel modules to match the core kernel&lt;br /&gt;</p>

<p>This package provides commonly used kernel modules for the core kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-modules-extra-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">dfd983c5d7ec2269205428fa0480d854313cc0f296caafa21c7a879526636305</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-modules-extra-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-modules-extra</strong> - Extra kernel modules to match the kernel&lt;br /&gt;</p>

<p>This package provides less commonly used kernel modules for the kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-debug-modules-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">1814e14aca17b702e32adf8c9b3e4112af5b5e6d345273dd2cc9b19b0ca92e85</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-debug-modules-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-debug-modules</strong> - kernel modules to match the core kernel&lt;br /&gt;</p>

<p>This package provides commonly used kernel modules for the core kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-zfcpdump-core-6.12.0-211.61.1.el10_2.s390x</title>
      <pubDate>Tue, 29 Sep 2026 08:38:31 AM GMT</pubDate>
      <guid isPermaLink="false">84fbeae81315744e3f7d674450653744c956eea7f2651c4d901b4a774138aa7c</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/k/kernel-zfcpdump-core-6.12.0-211.61.1.el10_2.s390x.rpm</link>
      <description><p><strong>kernel-zfcpdump-core</strong> - The Linux kernel compiled for zfcpdump usage&lt;br /&gt;</p>

<p>The kernel package contains the Linux kernel (vmlinuz) for use by the&lt;br /&gt;
zfcpdump infrastructure.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 29 Sep 2026 GMT - Release Engineering &amp;lt;releng@rockylinux.org&amp;gt; - 6.12.0-211.61.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Mon, 28 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.61.1.el10_2]
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556}
- perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496]
- KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775}
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317}
- nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480}
- x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402]
- fhandle: fix UAF due to unlocked -&amp;gt;mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341}
- crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943]
- crypto: tegra - fix rctx-&amp;gt;cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299}
- KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661]
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661]
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076}
- ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942}

Wed, 23 Sep 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-211.60.1.el10_2]
- pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121}
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481}
- af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005}
- af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262]
- ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714}
- drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108}
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257}
- drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266}
- drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098}
- drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311}
- drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273}
- drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267}
- drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290}
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204}
- fbcon: Set fb_display[i]-&amp;gt;mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199}
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331]
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203}
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285}
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-cryptography-43.0.0-4.el10_2.5.s390x</title>
      <pubDate>Fri, 25 Sep 2026 09:25:17 AM GMT</pubDate>
      <guid isPermaLink="false">d58052d9382b96565b96e1deb76df4b921df6492836ae6021d10db9c419b9879</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/p/python3-cryptography-43.0.0-4.el10_2.5.s390x.rpm</link>
      <description><p><strong>python3-cryptography</strong> - PyCA's cryptography library&lt;br /&gt;</p>

<p>cryptography is a package designed to expose cryptographic primitives and&lt;br /&gt;
recipes to Python developers.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 28 Aug 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 43.0.0-5
- Fix CVE-2026-69249: add X.509 signature validation budget

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 43.0.0-4
- Bump release for October 2024 mass rebuild:

Thu, 12 Sep 2024 GMT - Francisco Trivino &amp;lt;ftrivino@redhat.com&amp;gt; - 43.0.0-3
- allow sha1 in OAEP

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libxml2-2.12.5-10.el10_2.4.s390x</title>
      <pubDate>Thu, 24 Sep 2026 05:16:01 PM GMT</pubDate>
      <guid isPermaLink="false">25b20524747252dc0f3297dff879b81b949ca6d325d45dcf2ab664b64a7a0eea</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libxml2-2.12.5-10.el10_2.4.s390x.rpm</link>
      <description><p><strong>libxml2</strong> - Library providing XML and HTML support&lt;br /&gt;</p>

<p>This library allows to manipulate XML files. It includes support&lt;br /&gt;
to read, modify and write XML and HTML files. There is DTDs support&lt;br /&gt;
this includes parsing and validation even with complex DtDs, either&lt;br /&gt;
at parse time or later once the document has been modified. The output&lt;br /&gt;
can be a simple SAX stream or and in-memory DOM like representations.&lt;br /&gt;
In this case one can use the built-in XPath and XPointer implementation&lt;br /&gt;
to select sub nodes or ranges. A flexible Input/Output mechanism is&lt;br /&gt;
available, with existing HTTP and FTP modules and combined to an&lt;br /&gt;
URI library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 08 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.12.5-10.4
- Fix CVE-2026-86144 (RHEL-256302)
- Fix CVE-2026-86140 (RHEL-256024)
- Fix CVE-2026-74860 (RHEL-255957)
- Fix CVE-2026-86142 (RHEL-256368)
- Fix CVE-2026-86143 (RHEL-256896)
- Fix CVE-2026-86138 (RHEL-256948)

Sat, 25 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.12.5-10.3
- Fix CVE-2026-11979 (RHEL-215571)

Tue, 16 Jun 2026 GMT - David King &amp;lt;dking@redhat.com&amp;gt; - 2.12.5-10.2
- Fix CVE-2025-6170 (RHEL-182007)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-libxml2-2.12.5-10.el10_2.4.s390x</title>
      <pubDate>Thu, 24 Sep 2026 05:16:01 PM GMT</pubDate>
      <guid isPermaLink="false">361d2d2c5b167b34c9a94594e7821f65274cbca6a6bbc18728fe4b962e658132</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/p/python3-libxml2-2.12.5-10.el10_2.4.s390x.rpm</link>
      <description><p><strong>python3-libxml2</strong> - Python 3 bindings for the libxml2 library&lt;br /&gt;</p>

<p>The libxml2-python3 package contains a Python 3 module that permits&lt;br /&gt;
applications written in the Python programming language, version 3, to use the&lt;br /&gt;
interface supplied by the libxml2 library to manipulate XML files.&lt;br /&gt;
&lt;br /&gt;
This library allows to manipulate XML files. It includes support&lt;br /&gt;
to read, modify and write XML and HTML files. There is DTDs support&lt;br /&gt;
this includes parsing and validation even with complex DTDs, either&lt;br /&gt;
at parse time or later once the document has been modified.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 08 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.12.5-10.4
- Fix CVE-2026-86144 (RHEL-256302)
- Fix CVE-2026-86140 (RHEL-256024)
- Fix CVE-2026-74860 (RHEL-255957)
- Fix CVE-2026-86142 (RHEL-256368)
- Fix CVE-2026-86143 (RHEL-256896)
- Fix CVE-2026-86138 (RHEL-256948)

Sat, 25 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.12.5-10.3
- Fix CVE-2026-11979 (RHEL-215571)

Tue, 16 Jun 2026 GMT - David King &amp;lt;dking@redhat.com&amp;gt; - 2.12.5-10.2
- Fix CVE-2025-6170 (RHEL-182007)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>curl-8.12.1-4.el10_2.6.s390x</title>
      <pubDate>Mon, 21 Sep 2026 10:23:15 AM GMT</pubDate>
      <guid isPermaLink="false">d497eae8443db2306f0878c57f282a2c31788da1e81008816e3945a2c91104fb</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/c/curl-8.12.1-4.el10_2.6.s390x.rpm</link>
      <description><p><strong>curl</strong> - A utility for getting files from remote servers (FTP, HTTP, and others)&lt;br /&gt;</p>

<p>curl is a command line tool for transferring data with URL syntax, supporting&lt;br /&gt;
FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP,&lt;br /&gt;
SMTP, POP3 and RTSP.  curl supports SSL certificates, HTTP POST, HTTP PUT, FTP&lt;br /&gt;
uploading, HTTP form based upload, proxies, cookies, user+password&lt;br /&gt;
authentication (Basic, Digest, NTLM, Negotiate, kerberos...), file transfer&lt;br /&gt;
resume, proxy tunneling and a busload of other useful tricks.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 03 Sep 2026 GMT - Jacek Migacz &amp;lt;jmigacz@redhat.com&amp;gt; - 8.12.1-4.6
- fix cookie injection via trailing dot super cookies (CVE-2026-8924)
- fix digest auth state leak on origin or credential change (CVE-2026-11856)
- fix netrc password lookup for non-matching login (CVE-2026-8926)

Mon, 31 Aug 2026 GMT - Jacek Migacz &amp;lt;jmigacz@redhat.com&amp;gt; - 8.12.1-4.5
- fix proxy auth not cleared properly on NULL (CVE-2026-9079)
- fix incomplete mTLS config in connection reuse and session cache
  (CVE-2026-8932)
- fix SASL service name connection reuse bypass (CVE-2026-8458)

Wed, 29 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 8.12.1-4.4
- fix proxy environment variable change detection (CVE-2026-8927)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libcurl-minimal-8.12.1-4.el10_2.6.s390x</title>
      <pubDate>Mon, 21 Sep 2026 10:23:15 AM GMT</pubDate>
      <guid isPermaLink="false">8f646667377668b7835488f64c0fb6c8089e757fe36e0419c4c49734a5aee6a0</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libcurl-minimal-8.12.1-4.el10_2.6.s390x.rpm</link>
      <description><p><strong>libcurl-minimal</strong> - Conservatively configured build of libcurl for minimal installations&lt;br /&gt;</p>

<p>This is a replacement of the 'libcurl' package for minimal installations.  It&lt;br /&gt;
comes with a limited set of features compared to the 'libcurl' package.  On the&lt;br /&gt;
other hand, the package is smaller and requires fewer run-time dependencies to&lt;br /&gt;
be installed.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 03 Sep 2026 GMT - Jacek Migacz &amp;lt;jmigacz@redhat.com&amp;gt; - 8.12.1-4.6
- fix cookie injection via trailing dot super cookies (CVE-2026-8924)
- fix digest auth state leak on origin or credential change (CVE-2026-11856)
- fix netrc password lookup for non-matching login (CVE-2026-8926)

Mon, 31 Aug 2026 GMT - Jacek Migacz &amp;lt;jmigacz@redhat.com&amp;gt; - 8.12.1-4.5
- fix proxy auth not cleared properly on NULL (CVE-2026-9079)
- fix incomplete mTLS config in connection reuse and session cache
  (CVE-2026-8932)
- fix SASL service name connection reuse bypass (CVE-2026-8458)

Wed, 29 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 8.12.1-4.4
- fix proxy environment variable change detection (CVE-2026-8927)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libcurl-8.12.1-4.el10_2.6.s390x</title>
      <pubDate>Mon, 21 Sep 2026 10:23:15 AM GMT</pubDate>
      <guid isPermaLink="false">9aef94da7b7c3d852d61f5a30171eec06f2bea3ec3059d2fa99dc11f273f9beb</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libcurl-8.12.1-4.el10_2.6.s390x.rpm</link>
      <description><p><strong>libcurl</strong> - A library for getting files from web servers&lt;br /&gt;</p>

<p>libcurl is a free and easy-to-use client-side URL transfer library, supporting&lt;br /&gt;
FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP,&lt;br /&gt;
SMTP, POP3 and RTSP. libcurl supports SSL certificates, HTTP POST, HTTP PUT,&lt;br /&gt;
FTP uploading, HTTP form based upload, proxies, cookies, user+password&lt;br /&gt;
authentication (Basic, Digest, NTLM, Negotiate, Kerberos4), file transfer&lt;br /&gt;
resume, http proxy tunneling and more.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 03 Sep 2026 GMT - Jacek Migacz &amp;lt;jmigacz@redhat.com&amp;gt; - 8.12.1-4.6
- fix cookie injection via trailing dot super cookies (CVE-2026-8924)
- fix digest auth state leak on origin or credential change (CVE-2026-11856)
- fix netrc password lookup for non-matching login (CVE-2026-8926)

Mon, 31 Aug 2026 GMT - Jacek Migacz &amp;lt;jmigacz@redhat.com&amp;gt; - 8.12.1-4.5
- fix proxy auth not cleared properly on NULL (CVE-2026-9079)
- fix incomplete mTLS config in connection reuse and session cache
  (CVE-2026-8932)
- fix SASL service name connection reuse bypass (CVE-2026-8458)

Wed, 29 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 8.12.1-4.4
- fix proxy environment variable change detection (CVE-2026-8927)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>sudo-1.9.17-10.p2.el10_2.6.s390x</title>
      <pubDate>Sat, 19 Sep 2026 01:09:17 AM GMT</pubDate>
      <guid isPermaLink="false">37efaeb0cb89b05ce1f25dffd63cc9216166555fa9992566bea6fa93f00bb4f2</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/sudo-1.9.17-10.p2.el10_2.6.s390x.rpm</link>
      <description><p><strong>sudo</strong> - Allows restricted root access for specified users&lt;br /&gt;</p>

<p>Sudo (superuser do) allows a system administrator to give certain&lt;br /&gt;
users (or groups of users) the ability to run some (or all) commands&lt;br /&gt;
as root while logging all commands and arguments. Sudo operates on a&lt;br /&gt;
per-command basis.  It is not a replacement for the shell.  Features&lt;br /&gt;
include: the ability to restrict what commands a user may run on a&lt;br /&gt;
per-host basis, copious logging of each command (providing a clear&lt;br /&gt;
audit trail of who did what), a configurable timeout of the sudo&lt;br /&gt;
command, and the ability to use the same configuration file (sudoers)&lt;br /&gt;
on many different machines.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 07 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 1.9.17-6
- Fix CVE-2026-82474: execveat(2) intercept/log_subcmds bypass

Thu, 23 Jul 2026 GMT - Alejandro López &amp;lt;allopez@redhat.com&amp;gt; - 1.9.17-5.p2
- Resolves: RHEL-212546 - Use canonicalized path if user path contains ".."

Fri, 10 Apr 2026 GMT - Alejandro López &amp;lt;allopez@redhat.com&amp;gt; - 1.9.17-4.p2
- Bump release number
- Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
  due to failure in privilege drop calls

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libevent-2.1.13-1.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 12:59:45 PM GMT</pubDate>
      <guid isPermaLink="false">35e2e83c20822a8b4e65721fc6ad50998537daf832fbe2ccf5a871d6a11ba322</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libevent-2.1.13-1.el10_2.s390x.rpm</link>
      <description><p><strong>libevent</strong> - Abstract asynchronous event notification library&lt;br /&gt;</p>

<p>The libevent API provides a mechanism to execute a callback function&lt;br /&gt;
when a specific event occurs on a file descriptor or after a timeout&lt;br /&gt;
has been reached. libevent is meant to replace the asynchronous event&lt;br /&gt;
loop found in event driven network servers. An application just needs&lt;br /&gt;
to call event_dispatch() and can then add or remove events dynamically&lt;br /&gt;
without having to change the event loop.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 03 Sep 2026 GMT - Fedor Vorobev &amp;lt;fvorobev@redhat.com&amp;gt; - 2.1.13-1
- Update to 2.1.13.
- The following CVEs are fixed:
-   CVE-2026-63383
-   CVE-2026-63384
-   CVE-2026-63388
-   CVE-2026-63387
-   CVE-2026-63379
-   CVE-2026-63381
-   CVE-2026-63382
-   CVE-2026-63385

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 2.1.12-16
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>coreutils-single-9.5-8.el10_2.1.s390x</title>
      <pubDate>Wed, 16 Sep 2026 12:58:24 PM GMT</pubDate>
      <guid isPermaLink="false">15b827a16f6b7b96e29cacfb94f14e69e018034bf8b43786492519c0750c8869</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/c/coreutils-single-9.5-8.el10_2.1.s390x.rpm</link>
      <description><p><strong>coreutils-single</strong> - coreutils multicall binary&lt;br /&gt;</p>

<p>These are the GNU core utilities,&lt;br /&gt;
packaged as a single multicall binary.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 27 Jul 2026 GMT - Lukáš Zaoral &amp;lt;lzaoral@redhat.com&amp;gt; - 9.5-8.1
- uniq: fix CVE-2026-56391 (RHEL-216794)
  - fix read overrun with -w
- unexpand: fix CVE-2026-56392 and related crashes (RHEL-216784)
  - fix direct.sh and unexpand/mb.sh tests
  - fix unexpand/expand crash on invalid multibyte characters
  - fix heap overflow with large tab stops
  - fix heap overflow when a wide blank overshoots a tab stop

Tue, 02 Jun 2026 GMT - Lukáš Zaoral &amp;lt;lzaoral@redhat.com&amp;gt; - 9.5-8
- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180649)

Thu, 15 Jan 2026 GMT - Lukáš Zaoral &amp;lt;lzaoral@redhat.com&amp;gt; - 9.5-7
- fold: fix processing of malformed UTF-8 sequences (RHEL-140116)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>coreutils-common-9.5-8.el10_2.1.s390x</title>
      <pubDate>Wed, 16 Sep 2026 12:58:24 PM GMT</pubDate>
      <guid isPermaLink="false">f69288f0f287344aeae838df04d68c9efa45198e62b8db9444a58613bddc3d71</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/c/coreutils-common-9.5-8.el10_2.1.s390x.rpm</link>
      <description><p><strong>coreutils-common</strong> - coreutils common optional components&lt;br /&gt;</p>

<p>Optional though recommended components,&lt;br /&gt;
including documentation and translations.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 27 Jul 2026 GMT - Lukáš Zaoral &amp;lt;lzaoral@redhat.com&amp;gt; - 9.5-8.1
- uniq: fix CVE-2026-56391 (RHEL-216794)
  - fix read overrun with -w
- unexpand: fix CVE-2026-56392 and related crashes (RHEL-216784)
  - fix direct.sh and unexpand/mb.sh tests
  - fix unexpand/expand crash on invalid multibyte characters
  - fix heap overflow with large tab stops
  - fix heap overflow when a wide blank overshoots a tab stop

Tue, 02 Jun 2026 GMT - Lukáš Zaoral &amp;lt;lzaoral@redhat.com&amp;gt; - 9.5-8
- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180649)

Thu, 15 Jan 2026 GMT - Lukáš Zaoral &amp;lt;lzaoral@redhat.com&amp;gt; - 9.5-7
- fold: fix processing of malformed UTF-8 sequences (RHEL-140116)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>coreutils-9.5-8.el10_2.1.s390x</title>
      <pubDate>Wed, 16 Sep 2026 12:58:24 PM GMT</pubDate>
      <guid isPermaLink="false">1e4ff63edf582fa3044cff38206d2bb480073a3a82e53b59c66c6c6bf24877b3</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/c/coreutils-9.5-8.el10_2.1.s390x.rpm</link>
      <description><p><strong>coreutils</strong> - A set of basic GNU tools commonly used in shell scripts&lt;br /&gt;</p>

<p>These are the GNU core utilities.  This package is the combination of&lt;br /&gt;
the old GNU fileutils, sh-utils, and textutils packages.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 27 Jul 2026 GMT - Lukáš Zaoral &amp;lt;lzaoral@redhat.com&amp;gt; - 9.5-8.1
- uniq: fix CVE-2026-56391 (RHEL-216794)
  - fix read overrun with -w
- unexpand: fix CVE-2026-56392 and related crashes (RHEL-216784)
  - fix direct.sh and unexpand/mb.sh tests
  - fix unexpand/expand crash on invalid multibyte characters
  - fix heap overflow with large tab stops
  - fix heap overflow when a wide blank overshoots a tab stop

Tue, 02 Jun 2026 GMT - Lukáš Zaoral &amp;lt;lzaoral@redhat.com&amp;gt; - 9.5-8
- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180649)

Thu, 15 Jan 2026 GMT - Lukáš Zaoral &amp;lt;lzaoral@redhat.com&amp;gt; - 9.5-7
- fold: fix processing of malformed UTF-8 sequences (RHEL-140116)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-winbind-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">dcfd045cf446ae0973165ea0e5f0a6bf827eccc91a941603e1fddf534a297c1d</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-winbind-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>samba-winbind</strong> - Samba winbind&lt;br /&gt;</p>

<p>The samba-winbind package provides the winbind NSS library, and some client&lt;br /&gt;
tools.  Winbind enables Linux to be a full member in Windows domains and to use&lt;br /&gt;
Windows user and group accounts on Linux.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-tools-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">62dbbaaa43e43b15b726a62136894e11519ba41ac95ced1382ce919e2eea2ed9</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-tools-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>samba-tools</strong> - Tools for Samba servers&lt;br /&gt;</p>

<p>The samba-tools package contains tools for Samba servers&lt;br /&gt;
and for GPO management on domain members.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-ldb-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">876a1f79f47c7167bccdfa40e75a0fa094fd12ffca11afa58db3a4b6a31efb5e</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/p/python3-ldb-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>python3-ldb</strong> - Python bindings for the LDB library&lt;br /&gt;</p>

<p>Python bindings for the LDB library</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-libs-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">d09e060907cf97076716b296024306d8d91e52db41a1fa829f9677b64cc995c5</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-libs-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>samba-libs</strong> - Samba libraries&lt;br /&gt;</p>

<p>The samba-libs package contains the libraries needed by programs that link&lt;br /&gt;
against the SMB, RPC and other protocols provided by the Samba suite.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-ldb-ldap-modules-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">14a4293fc89184234aaf2ee9946feffeefaa758b223efb91dc0e20a25c10e4be</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-ldb-ldap-modules-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>samba-ldb-ldap-modules</strong> - Samba ldap modules for ldb&lt;br /&gt;</p>

<p>This package contains the ldb ldap modules required by samba-tool and&lt;br /&gt;
samba-gpupdate.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-dcerpc-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">6c849dc2270af5af804544b53fb8b4afb444e7a2c2d03069a0ea505a32ec2918</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-dcerpc-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>samba-dcerpc</strong> - DCE RPC binaries&lt;br /&gt;</p>

<p>The samba-dcerpc package contains binaries that serve DCERPC over named pipes.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-dc-libs-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">1e2ccfb73438d2c6e2160b283f0991b6e0a3e746d617665c665b98d161f8bc0e</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-dc-libs-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>samba-dc-libs</strong> - Samba AD Domain Controller Libraries&lt;br /&gt;</p>

<p>The samba-dc-libs package contains the libraries needed by the DC to&lt;br /&gt;
link against the SMB, RPC and other protocols.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-common-tools-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">0b9a96e95a41bea1db4b1badea9f328c66defb791599a56c254358053eab1bef</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-common-tools-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>samba-common-tools</strong> - Tools for Samba clients&lt;br /&gt;</p>

<p>The samba-common-tools package contains tools for SMB/CIFS clients.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ldb-tools-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">90c911dc5f72bce2153fc99328322937e20a4cbb3c53a559cd19fb77cde0370c</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/ldb-tools-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>ldb-tools</strong> - Tools to manage LDB files&lt;br /&gt;</p>

<p>Tools to manage LDB files</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-common-libs-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">d6613fdee02fd982d62e432ec5d31a246f416bbb3e596dc463b9b9fd1b710c29</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-common-libs-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>samba-common-libs</strong> - Libraries used by both Samba servers and clients&lt;br /&gt;</p>

<p>The samba-common-libs package contains internal libraries needed by the&lt;br /&gt;
SMB/CIFS clients.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libsmbclient-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">0f4324963558eef2f3ace8a5fc5e556a861a752beeb198d834a582f85cc0cae3</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libsmbclient-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>libsmbclient</strong> - The SMB client library&lt;br /&gt;</p>

<p>The libsmbclient contains the SMB client library from the Samba suite.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-client-libs-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">074845e5960e3552296a9114943f148d38bb5a23855cab9a83df43e5a420743e</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-client-libs-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>samba-client-libs</strong> - Samba client libraries&lt;br /&gt;</p>

<p>The samba-client-libs package contains internal libraries needed by the&lt;br /&gt;
SMB/CIFS clients.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">59c938690fab206c20d5f3bbf4dd8d119597ec004bfa1fc5bb852c9cf41e00e2</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>samba</strong> - Server and Client software to interoperate with Windows machines&lt;br /&gt;</p>

<p>Samba is the standard Windows interoperability suite of programs for Linux and&lt;br /&gt;
Unix.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libnetapi-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">4178666048dfe710315df06e6a2d03eb2c3e4f2689b81344e6f7ced9ffbfe656</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libnetapi-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>libnetapi</strong> - The NETAPI library&lt;br /&gt;</p>

<p>This contains the NETAPI library from the Samba suite.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libldb-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">93e4acdae3c47e6abd77aef112fa4c413e4caa92fd6c163ad7ca6f3ad9ad4cb6</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libldb-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>libldb</strong> - A schema-less, ldap like, API and database&lt;br /&gt;</p>

<p>An extensible library that implements an LDAP like API to access remote LDAP&lt;br /&gt;
servers, or use local tdb databases.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-samba-dc-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">e068f5273a4a7a7f433e5683a756c5e0f2d8cb8d5c7db137b0b409583484df7e</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/p/python3-samba-dc-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>python3-samba-dc</strong> - Samba Python libraries for Samba AD&lt;br /&gt;</p>

<p>The python3-samba-dc package contains the Python libraries needed by programs&lt;br /&gt;
to manage Samba AD.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-samba-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">8baa78384c37dec3a4ea09032dab6dd8c6c50247c8232bfa6e99b2bd5cf56019</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/p/python3-samba-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>python3-samba</strong> - Samba Python3 libraries&lt;br /&gt;</p>

<p>The python3-samba package contains the Python 3 libraries needed by programs&lt;br /&gt;
that use SMB, RPC and other Samba provided protocols in Python 3 programs.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libwbclient-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">8f7d1ada0a1e606a9d2717745607d8c38cc817f841e306388bfa8fa4d7861ca8</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libwbclient-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>libwbclient</strong> - The winbind client library&lt;br /&gt;</p>

<p>The libwbclient package contains the winbind client library from the Samba&lt;br /&gt;
suite.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-winbind-modules-4.23.5-110.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:45:10 AM GMT</pubDate>
      <guid isPermaLink="false">0c2c877b7ac33b141663d578c887bb6836311660e0820f79d07cd306c92076dc</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-winbind-modules-4.23.5-110.el10_2.s390x.rpm</link>
      <description><p><strong>samba-winbind-modules</strong> - Samba winbind modules&lt;br /&gt;</p>

<p>The samba-winbind-modules package provides the NSS library and a PAM module&lt;br /&gt;
necessary to communicate to the Winbind Daemon</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-usershares-4.23.5-110.el10_2.noarch</title>
      <pubDate>Wed, 16 Sep 2026 09:27:18 AM GMT</pubDate>
      <guid isPermaLink="false">a44166cd0343ea04194ef32e4f6548dc8046cf05fab96023d7c851eebd69a2a1</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-usershares-4.23.5-110.el10_2.noarch.rpm</link>
      <description><p><strong>samba-usershares</strong> - Provides support for non-root user shares&lt;br /&gt;</p>

<p>Installing this package will provide a configuration file, group and&lt;br /&gt;
directories to support non-root user shares. You can configure them&lt;br /&gt;
as a user using the `net usershare` command.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>samba-common-4.23.5-110.el10_2.noarch</title>
      <pubDate>Wed, 16 Sep 2026 09:27:18 AM GMT</pubDate>
      <guid isPermaLink="false">e91e0244d7d02549efc60e424d208e3320a08daf7cdaf3c5d496a57b3a0a711c</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/s/samba-common-4.23.5-110.el10_2.noarch.rpm</link>
      <description><p><strong>samba-common</strong> - Files used by both Samba servers and clients&lt;br /&gt;</p>

<p>samba-common provides files necessary for both the server and client&lt;br /&gt;
packages of Samba.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 02 Jun 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-110
- Fix winbind mkhomedir ownership handling
- resolves: RHEL-180758

Thu, 21 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-109
- Bump build number

Tue, 19 May 2026 GMT - Pavel Filipenský &amp;lt;pfilipensky@samba.org&amp;gt; - 0:4.23.5-108
- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cifs-utils-7.7-1.el10_2.s390x</title>
      <pubDate>Wed, 16 Sep 2026 09:24:41 AM GMT</pubDate>
      <guid isPermaLink="false">3b0c571936aa4009a49cc5ec58304d5a848a6c133a6203d7ddc4778e71379944</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/c/cifs-utils-7.7-1.el10_2.s390x.rpm</link>
      <description><p><strong>cifs-utils</strong> - Utilities for mounting and managing CIFS mounts&lt;br /&gt;</p>

<p>The SMB/CIFS protocol is a standard file sharing protocol widely deployed&lt;br /&gt;
on Microsoft Windows machines. This package contains tools for mounting&lt;br /&gt;
shares on Linux using the SMB/CIFS protocol. The tools in this package&lt;br /&gt;
work in conjunction with support in the kernel to allow one to mount a&lt;br /&gt;
SMB/CIFS share onto a client and use it as if it were a standard Linux&lt;br /&gt;
file system.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 25 Aug 2026 GMT - Paulo Alcantara &amp;lt;paalcant@redhat.com&amp;gt; - 7.7-1
- resolves: RHEL-247581 - fix krb5 regression with --trust-dns

Tue, 07 Jul 2026 GMT - Paulo Alcantara &amp;lt;paalcant@redhat.com&amp;gt; - 7.6-2
- resolves: RHEL-192935 - fix krb5 mount regression

Thu, 25 Jun 2026 GMT - Paulo Alcantara &amp;lt;paalcant@redhat.com&amp;gt; - 7.6-1
- Update to version 7.6
- resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rsync-3.5.0-3.el10_2.s390x</title>
      <pubDate>Tue, 15 Sep 2026 10:10:22 AM GMT</pubDate>
      <guid isPermaLink="false">8c956b59c4572af441cbeaf70a525dc76d55873e05fb5375eb4435e96ba2e840</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/r/rsync-3.5.0-3.el10_2.s390x.rpm</link>
      <description><p><strong>rsync</strong> - A program for synchronizing files over a network&lt;br /&gt;</p>

<p>Rsync uses a reliable algorithm to bring remote and host files into&lt;br /&gt;
sync very quickly. Rsync is fast because it just sends the differences&lt;br /&gt;
in the files over the network instead of sending the complete&lt;br /&gt;
files. Rsync is often used as a very powerful mirroring process or&lt;br /&gt;
just as a more capable replacement for the rcp command. A technical&lt;br /&gt;
report which describes the rsync algorithm is included in this&lt;br /&gt;
package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 07 Sep 2026 GMT - Michal Ruprich &amp;lt;mruprich@redhat.com&amp;gt; - 3.5.0-3
- Related: RHEL-246094 - O_PATH for directory travesal full fix

Tue, 25 Aug 2026 GMT - Michal Ruprich &amp;lt;mruprich@redhat.com&amp;gt; - 3.5.0-2
- Related: RHEL-246094 - O_PATH for directory traversal

Fri, 21 Aug 2026 GMT - Michal Ruprich &amp;lt;mruprich@redhat.com&amp;gt; - 3.5.0-1
- Resolves: RHEL-246094 - Rebase rsync to version 3.5.0 in RHEL10
- Resolves: RHEL-245337 - Directory escape via TOCTOU (CVE-2026-53783)
- Resolves: RHEL-244599 - Arbitrary file write (CVE-2026-53785)
- Resolves: RHEL-246095 - Command injection (CVE-2026-53790)
- Resolves: RHEL-246065 - Daemon IP spoofing (CVE-2026-53791)
- Resolves: RHEL-244718 - Local privilege escalation (CVE-2026-53803)
- Resolves: RHEL-244797 - DoS via algorithmic complexity (CVE-2026-70453)
- Resolves: RHEL-245247 - DoS via Zstandard compression (CVE-2026-70455)
- Resolves: RHEL-245188 - Heap out-of-bounds write (CVE-2026-70456)
- Resolves: RHEL-245313 - Information disclosure and DoS (CVE-2026-70461)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openssl-libs-1:3.5.8-1.el10_2.s390x</title>
      <pubDate>Mon, 14 Sep 2026 09:48:09 AM GMT</pubDate>
      <guid isPermaLink="false">0439d737ecaa5ed8ea619353c439a55adf40172994065d65d046e3451200bdab</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/o/openssl-libs-3.5.8-1.el10_2.s390x.rpm</link>
      <description><p><strong>openssl-libs</strong> - A general purpose cryptography library with TLS implementation&lt;br /&gt;</p>

<p>OpenSSL is a toolkit for supporting cryptography. The openssl-libs&lt;br /&gt;
package contains the libraries that are used by various applications which&lt;br /&gt;
support cryptographic algorithms and protocols.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 25 Aug 2026 GMT - Dmitry Belyavskiy &amp;lt;dbelyavs@redhat.com&amp;gt; - 1:3.5.8-1
- Rebase to OpenSSL 3.5.8
  Resolves: RHEL-242944
  Resolves: RHEL-246254
  Resolves: RHEL-246266
  Resolves: RHEL-246306
  Resolves: RHEL-246437
  Resolves: RHEL-246441
  Resolves: RHEL-246445
  Resolves: RHEL-246449
  Resolves: RHEL-246453

Thu, 06 Aug 2026 GMT - Pavol Žáčik &amp;lt;pzacik@redhat.com&amp;gt; - 1:3.5.5-7
- Backport the "HollowByte" hardening patch
  Resolves: RHEL-212362

Wed, 15 Jul 2026 GMT - Pavol Žáčik &amp;lt;pzacik@redhat.com&amp;gt; - 1:3.5.5-6
- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210864

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openssl-fips-provider-1:3.5.8-1.el10_2.s390x</title>
      <pubDate>Mon, 14 Sep 2026 09:48:09 AM GMT</pubDate>
      <guid isPermaLink="false">d130151b13983786d12de3cbbdc8ab4dcc046e276511f7921ad2a500155163a3</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/o/openssl-fips-provider-3.5.8-1.el10_2.s390x.rpm</link>
      <description><p><strong>openssl-fips-provider</strong> - The FIPS Provider module&lt;br /&gt;</p>

<p>OpenSSL is a toolkit for supporting cryptography. The openssl-fips-provider&lt;br /&gt;
package provides the fips.so provider, a cryptography provider that follows&lt;br /&gt;
FIPS requirements and provides FIPS approved algorithms.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 25 Aug 2026 GMT - Dmitry Belyavskiy &amp;lt;dbelyavs@redhat.com&amp;gt; - 1:3.5.8-1
- Rebase to OpenSSL 3.5.8
  Resolves: RHEL-242944
  Resolves: RHEL-246254
  Resolves: RHEL-246266
  Resolves: RHEL-246306
  Resolves: RHEL-246437
  Resolves: RHEL-246441
  Resolves: RHEL-246445
  Resolves: RHEL-246449
  Resolves: RHEL-246453

Thu, 06 Aug 2026 GMT - Pavol Žáčik &amp;lt;pzacik@redhat.com&amp;gt; - 1:3.5.5-7
- Backport the "HollowByte" hardening patch
  Resolves: RHEL-212362

Wed, 15 Jul 2026 GMT - Pavol Žáčik &amp;lt;pzacik@redhat.com&amp;gt; - 1:3.5.5-6
- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210864

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openssl-1:3.5.8-1.el10_2.s390x</title>
      <pubDate>Mon, 14 Sep 2026 09:48:09 AM GMT</pubDate>
      <guid isPermaLink="false">9dcc8a2525b4283c975e673d21735ac68cae1ec5f556d2889abe9565a7b35e78</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/o/openssl-3.5.8-1.el10_2.s390x.rpm</link>
      <description><p><strong>openssl</strong> - Utilities from the general purpose cryptography library with TLS implementation&lt;br /&gt;</p>

<p>The OpenSSL toolkit provides support for secure communications between&lt;br /&gt;
machines. OpenSSL includes a certificate management tool and shared&lt;br /&gt;
libraries which provide various cryptographic algorithms and&lt;br /&gt;
protocols.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 25 Aug 2026 GMT - Dmitry Belyavskiy &amp;lt;dbelyavs@redhat.com&amp;gt; - 1:3.5.8-1
- Rebase to OpenSSL 3.5.8
  Resolves: RHEL-242944
  Resolves: RHEL-246254
  Resolves: RHEL-246266
  Resolves: RHEL-246306
  Resolves: RHEL-246437
  Resolves: RHEL-246441
  Resolves: RHEL-246445
  Resolves: RHEL-246449
  Resolves: RHEL-246453

Thu, 06 Aug 2026 GMT - Pavol Žáčik &amp;lt;pzacik@redhat.com&amp;gt; - 1:3.5.5-7
- Backport the "HollowByte" hardening patch
  Resolves: RHEL-212362

Wed, 15 Jul 2026 GMT - Pavol Žáčik &amp;lt;pzacik@redhat.com&amp;gt; - 1:3.5.5-6
- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210864

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libkcapi-hmaccalc-1.5.1-1.el10_2.s390x</title>
      <pubDate>Fri, 11 Sep 2026 05:20:33 PM GMT</pubDate>
      <guid isPermaLink="false">3af727925b719040ca6e17e4028b6425ed953598ef1ffd174cec51f20e7357ae</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libkcapi-hmaccalc-1.5.1-1.el10_2.s390x.rpm</link>
      <description><p><strong>libkcapi-hmaccalc</strong> - Drop-in replacements for hmaccalc provided by the libkcapi package&lt;br /&gt;</p>

<p>Provides drop-in replacements for sha*hmac tools (from package&lt;br /&gt;
hmaccalc) using libkcapi.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 17 Aug 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 1.5.1-1
- Rebase to 1.5.1

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.5.0-3
- Bump release for October 2024 mass rebuild:

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libkcapi-hasher-1.5.1-1.el10_2.s390x</title>
      <pubDate>Fri, 11 Sep 2026 05:20:33 PM GMT</pubDate>
      <guid isPermaLink="false">4aaef94504c567dffdcfd3f6b6293d554c09b9011ef043b20b416c1b51bb48e9</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libkcapi-hasher-1.5.1-1.el10_2.s390x.rpm</link>
      <description><p><strong>libkcapi-hasher</strong> - Common libkcapi hashing application&lt;br /&gt;</p>

<p>Provides The kcapi-hasher binary used by other libkcapi subpackages.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 17 Aug 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 1.5.1-1
- Rebase to 1.5.1

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.5.0-3
- Bump release for October 2024 mass rebuild:

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libkcapi-1.5.1-1.el10_2.s390x</title>
      <pubDate>Fri, 11 Sep 2026 05:20:33 PM GMT</pubDate>
      <guid isPermaLink="false">649347b861d11dbc5d1cf47b090c3dce3f2a971dd23f425a18fa528034745d40</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libkcapi-1.5.1-1.el10_2.s390x.rpm</link>
      <description><p><strong>libkcapi</strong> - User space interface to the Linux Kernel Crypto API&lt;br /&gt;</p>

<p>libkcapi allows user-space to access the Linux kernel crypto API.&lt;br /&gt;
&lt;br /&gt;
This library uses the netlink interface and exports easy to use APIs&lt;br /&gt;
so that a developer does not need to consider the low-level netlink&lt;br /&gt;
interface handling.&lt;br /&gt;
&lt;br /&gt;
The library does not implement any cipher algorithms.  All consumer&lt;br /&gt;
requests are sent to the kernel for processing.  Results from the&lt;br /&gt;
kernel crypto API are returned to the consumer via the library API.&lt;br /&gt;
&lt;br /&gt;
The kernel interface and therefore this library can be used by&lt;br /&gt;
unprivileged processes.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 17 Aug 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 1.5.1-1
- Rebase to 1.5.1

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.5.0-3
- Bump release for October 2024 mass rebuild:

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libarchive-3.7.7-11.el10_2.s390x</title>
      <pubDate>Fri, 11 Sep 2026 05:05:58 PM GMT</pubDate>
      <guid isPermaLink="false">df78a0d6354cc3130362155d1417e43957113b0ea3e2ca5a470f37956e4b81e1</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/l/libarchive-3.7.7-11.el10_2.s390x.rpm</link>
      <description><p><strong>libarchive</strong> - A library for handling streaming archive formats&lt;br /&gt;</p>

<p>Libarchive is a programming library that can create and read several different&lt;br /&gt;
streaming archive formats, including most popular tar variants, several cpio&lt;br /&gt;
formats, and both BSD and GNU ar variants. It can also write shar archives and&lt;br /&gt;
read ISO9660 CDROM images and ZIP archives.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 12 Aug 2026 GMT - Daniel Handzus &amp;lt;dhandzus@redhat.com&amp;gt; - 3.7.7-11
- Related: CVE-2026-16517 and CVE-2026-15028

Wed, 15 Jul 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3.7.7-10
- Related: CVE-2026-14164

Tue, 30 Jun 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3.7.7-9
- Resolves: CVE-2026-14164

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>vim-minimal-2:9.1.083-9.el10_2.20.s390x</title>
      <pubDate>Thu, 10 Sep 2026 09:21:42 AM GMT</pubDate>
      <guid isPermaLink="false">75b063a717f5863bbf44ec7526b69fb54246934169335b806ee6ec25581f4a75</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/v/vim-minimal-9.1.083-9.el10_2.20.s390x.rpm</link>
      <description><p><strong>vim-minimal</strong> - A minimal version of the VIM editor&lt;br /&gt;</p>

<p>VIM (VIsual editor iMproved) is an updated and improved version of the&lt;br /&gt;
vi editor.  Vi was the first real screen-based editor for UNIX, and is&lt;br /&gt;
still very popular.  VIM improves on vi by adding new features:&lt;br /&gt;
multiple windows, multi-level undo, block highlighting and more. The&lt;br /&gt;
vim-minimal package includes a minimal version of VIM, providing&lt;br /&gt;
the commands vi, view, ex, rvi, and rview. NOTE: The online help is&lt;br /&gt;
only available when the vim-common package is installed.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 04 Sep 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9.20
- RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator

Fri, 04 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:9.1.083-9.19
- RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in
  dump_prefixes()

Fri, 04 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:9.1.083-9.18
- RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in
  spell_soundfold_sal()

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>vim-filesystem-2:9.1.083-9.el10_2.20.noarch</title>
      <pubDate>Thu, 10 Sep 2026 09:16:26 AM GMT</pubDate>
      <guid isPermaLink="false">34e8e29e54b9a3bbcfc5159191e264fcf247307b90d2d20dfbb6186f3d19fe1f</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/v/vim-filesystem-9.1.083-9.el10_2.20.noarch.rpm</link>
      <description><p><strong>vim-filesystem</strong> - VIM filesystem layout&lt;br /&gt;</p>

<p>This package provides some directories which are required by other&lt;br /&gt;
packages that add vim files, p.e.  additional syntax files or filetypes.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 04 Sep 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9.20
- RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator

Fri, 04 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:9.1.083-9.19
- RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in
  dump_prefixes()

Fri, 04 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:9.1.083-9.18
- RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in
  spell_soundfold_sal()

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>vim-data-2:9.1.083-9.el10_2.20.noarch</title>
      <pubDate>Thu, 10 Sep 2026 09:16:26 AM GMT</pubDate>
      <guid isPermaLink="false">a7029dfff37963ba9285b3182a2e0a0e14a10f27d1566737bfa8ea77ba339cc4</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/v/vim-data-9.1.083-9.el10_2.20.noarch.rpm</link>
      <description><p><strong>vim-data</strong> - Shared data for Vi and Vim&lt;br /&gt;</p>

<p>The subpackage is used for shipping files and directories, which need to be&lt;br /&gt;
shared between vim-minimal and vim-common packages.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 04 Sep 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9.20
- RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator

Fri, 04 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:9.1.083-9.19
- RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in
  dump_prefixes()

Fri, 04 Sep 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2:9.1.083-9.18
- RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in
  spell_soundfold_sal()

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glib2-2.80.4-12.el10_2.22.s390x</title>
      <pubDate>Tue, 08 Sep 2026 08:58:12 AM GMT</pubDate>
      <guid isPermaLink="false">0b4f1697f44e3f9ff5150bcce767f361ca88f81b7ba44b1fc2cc68e6518b75a8</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/g/glib2-2.80.4-12.el10_2.22.s390x.rpm</link>
      <description><p><strong>glib2</strong> - A library of handy utility functions&lt;br /&gt;</p>

<p>GLib is the low-level core library that forms the basis for projects&lt;br /&gt;
such as GTK+ and GNOME. It provides data structure handling for C,&lt;br /&gt;
portability wrappers, and interfaces for such runtime functionality&lt;br /&gt;
as an event loop, threads, dynamic loading, and an object system.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 31 Aug 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.80.4-22
- Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap

Thu, 30 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.80.4-21
- Fix CVE-2026-15588: limit D-Bus auth line read length

Thu, 30 Jul 2026 GMT - RHEL Packaging Agent &amp;lt;redhat-ymir-agent@redhat.com&amp;gt; - 2.80.4-20
- Fix CVE-2026-58011: range validation in g_date_time_add_full()

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>xz-libs-1:5.6.2-4.el10_2.1.s390x</title>
      <pubDate>Tue, 08 Sep 2026 08:52:11 AM GMT</pubDate>
      <guid isPermaLink="false">ae4dee37b6781f1fd7241528652d1057fd010b51c6c133fed4de8f19896e5c0d</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/x/xz-libs-5.6.2-4.el10_2.1.s390x.rpm</link>
      <description><p><strong>xz-libs</strong> - Libraries for decoding LZMA compression&lt;br /&gt;</p>

<p>Libraries for decoding files compressed with LZMA or XZ utils.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 21 Aug 2026 GMT - Jakub Martisko &amp;lt;jamartis@redhat.com&amp;gt; - 1:5.6.2-4.1
- Fix: a buffer overflow in lzma_index_append()
- Add test for the issue above (needs a special build config to actually fail -&amp;gt; does not fail in our environemnt)
- Resolves: CVE-2026-34743

Tue, 13 May 2025 GMT - Jakub Martisko &amp;lt;jamartis@redhat.com&amp;gt; - 1:5.6.2-4
- Fix: heap-use-after-free bug in threaded .xz decoder (CVE-2025-31115)
- Resolves: RHEL-86029

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1:5.6.2-3
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>xz-1:5.6.2-4.el10_2.1.s390x</title>
      <pubDate>Tue, 08 Sep 2026 08:52:11 AM GMT</pubDate>
      <guid isPermaLink="false">3a7cf93a4ed056ec88125119fe97eaf3931d8c0210e826d6d1f2f3f8b0fd050b</guid>
      <link>https://dl.rockylinux.org/pub/rocky/10/BaseOS/s390x/os/Packages/x/xz-5.6.2-4.el10_2.1.s390x.rpm</link>
      <description><p><strong>xz</strong> - LZMA compression utilities&lt;br /&gt;</p>

<p>XZ Utils are an attempt to make LZMA compression easy to use on free (as in&lt;br /&gt;
freedom) operating systems. This is achieved by providing tools and libraries&lt;br /&gt;
which are similar to use than the equivalents of the most popular existing&lt;br /&gt;
compression algorithms.&lt;br /&gt;
&lt;br /&gt;
LZMA is a general purpose compression algorithm designed by Igor Pavlov as&lt;br /&gt;
part of 7-Zip. It provides high compression ratio while keeping the&lt;br /&gt;
decompression speed fast.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 21 Aug 2026 GMT - Jakub Martisko &amp;lt;jamartis@redhat.com&amp;gt; - 1:5.6.2-4.1
- Fix: a buffer overflow in lzma_index_append()
- Add test for the issue above (needs a special build config to actually fail -&amp;gt; does not fail in our environemnt)
- Resolves: CVE-2026-34743

Tue, 13 May 2025 GMT - Jakub Martisko &amp;lt;jamartis@redhat.com&amp;gt; - 1:5.6.2-4
- Fix: heap-use-after-free bug in threaded .xz decoder (CVE-2025-31115)
- Resolves: RHEL-86029

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1:5.6.2-3
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

&lt;/pre&gt;</description>
    </item>
  </channel>
</rss>
