<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="467">
<package pkgid="e958d91b369fefe4c2923a5355a597bbc61488b1507a66541d5eea45bc493ac6" name="kernel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="d0143178e5ff6e8f8312f7c0d1d626d43f38b0eb09df6736beef2d7837e4148b" name="kernel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="a1968f6e12f50deb9f71ca6b8835481c79ef0f4aa3157606910261447d448c51" name="kernel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="08e36b1b25c24d7adb24d329dbc4505fef6fcd170cafa135a247380fb238d776" name="kernel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="5842c47da0a4571acf21bfd6b8d7fdde28f5e4e7265843a0c2cd7555afa8242e" name="kernel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="fc0c8239af7693491f55cb02620791c7a0e0082b630d9fba53612c933d601621" name="kernel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="45847ffa90591a5d2fbb9839fe203fc474ddabbcac4a26a700869b3ee04c7d44" name="kernel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="28440264f6ce49d19f0b3e83d701dd35e8a6f344ddb28e78dde5e8e1923de81c" name="kernel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="0715d94ce3c8903148be1fbddf117924a080d3951223452bda6cceae19a1eefe" name="kernel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="eca4a385370c4f8efcc4b243bb20db008b0272d0058e1396bb0742dc13335813" name="kernel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="6ade5f744cb84c46c8ff2e6a37806c611279ccdb5bb8054773b5e974e290e64f" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="dbdf09ea555e68b101d81c4e598c0c234a3b6d047125210b6eb6403e2eadb68f" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="54592358065efa0e592d494861fc886efcc117288a0e46e4f6ce79a90d55589f" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="3440372e7560d7828b74ea4e3e03dc9401d7b328a0bcf277bae51b1b00f24a63" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="aab645e1ea1c9c49376a263f52b745098fc8e54c90f29d762b31f2d318f0a74c" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="57508a114acb4b9d36f36fd3a49c5a75cafde8bb1637149fccdb1ff223d3558c" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="89046c9da1c391cc50d3f846b6a86efea6dbc925a88742ed7cfc961941dfdea0" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="1c1d7d7aed300b599356a164e092e3371fdc565a82a0e388ce0c5a790484644a" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="f508a1dd1e38467aa3ae4da6ac3dbff6adfe5ed242b8fc937e993bdfcdb9c65f" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="dfe419ad73b925afb9bd4ec7856c96c6c6581a0aa79bd29d466e9765060f5999" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="dae96eb39c0b86cea2932431221b2b0e11759a245689e979f1229d9323b257dd" name="kernel-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="03655569a0975b71bcc964cc4793a00bd6c836e80f32dbbdf4e3f8e76200c2a8" name="kernel-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="82e077138803942e0aa3401959d962b99dce4269ee9491d4483d003627094837" name="kernel-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="9b9a63d85cdda0f99f8d28a588b33f71f69f16d0165072a5c38ebdabe29e3f46" name="kernel-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="b715100e987ea3d10a1f53b2ddbb3232c7e1aa035e0e5d9fcd02df6c79d8c274" name="kernel-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="330717b1747f488e33adce024ea5966b8e038e8f29d61e404bb92a0ddc1ece4a" name="kernel-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="7998d1b25c10e7fa135f2fca58b05616450d4abe414d70daa2f1bc5c63a2fc98" name="kernel-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="a641cff2b8dcdf6ae662a01c9bacfee799757b1f4504ff4321976e305307418a" name="kernel-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="d10f8dcd5e59c741dc33a4bf522793a893dd5421d018d0e9283be2c8e6c759b0" name="kernel-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="2505966396d6bda90a57621ecbc2d1c02bdcf2a13c82a36429fa8cde9ff140de" name="kernel-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="809aefcb9d1b306db9964118f4d38f42412282cbb596ae8eb64b7bc19947f2cc" name="kernel-cross-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="4a7e5c141494c4e2ee3eae4636739e58fb764a29ed0955a12d6fa61675194544" name="kernel-cross-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="0866119466ba7c907cc9a9794779996c026a1767ca20324464794ab4b850dfab" name="kernel-cross-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="434d764491df39eb213bdcfefffa0cc8eb48da6dad5df7df7aa0d4bf57f408ea" name="kernel-cross-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="d11b065753d4ec7d8fdec315b54c50ec9dd71ad8d07eff42ec32c12f196b76d8" name="kernel-cross-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="6beac9356de283b0406438f8a75e9aa46c88c83ad59992aa0a7f57aea3e9bb33" name="kernel-cross-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="a29e9f602ddf2d412097ed15c5b5f0111da731fa6ee7e49099b1a64f367ab948" name="kernel-cross-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="8e3c360db6a695a1d012d1b7b5a78e5636c403d8bf0a19320d3777bd21a9d50b" name="kernel-cross-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="fde342f6bd9ed557295af39546086f0a469667c5b1522d33217134aade861fd1" name="kernel-cross-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="517a8e9b80f5169f50e305ec44757791afc2a47d1d5c14934e6cc9e8c2377f11" name="kernel-cross-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="5d739784e69591ad05b04e6d128994d01f697ff76f90aa01f982d617d54279f4" name="kernel-debug" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="7b49019da96284a9efc95f459388af985345c51a87057c45f1d8c991e9b00992" name="kernel-debug" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="c66622d7a03d7718c0859c7517569d657f9ea3d70a2a83e44a0d6c47156c3945" name="kernel-debug" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="b8a93ec316e577a0782dea0bb18b3493debfed542c2921da48f5ba7ef82b9e81" name="kernel-debug" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="03dc4e50363ceaf7eebf5ab14b598c398c0bafc6d4b7f0d8ae51da6fea2bfc11" name="kernel-debug" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="c14190874cec9ba9e124da2e7349285433231eec6d88622e0338016701a8a985" name="kernel-debug" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="6004ed3d4aed613af23d8cb336f9e7415cd13b2d41f2ee47deb2f88bc06af3e8" name="kernel-debug" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="a104e29572597190c59eab5720891603e642582ac3475d9be6d6a26bc0b74e79" name="kernel-debug" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="d2da72ef13f9bc155d646c780409e5d767bd916a0c6d551d1b3ce6c9b285f50d" name="kernel-debug" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="dbff48afec3f16a9c72f6a9aa63e88472d99ecf2147f5af79707d785ef569333" name="kernel-debug" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="19d58f963e688333fe486973511e16eebb73cc42b591d807bb787344e3a33277" name="kernel-debug-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="50184fc59ab2e11d4636ea96982c66641d6db22fed2bbda275565fdfb64fbe48" name="kernel-debug-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="8b812083c78ff568c80f5483510c57b96072488ec65ca699f102289329bbd523" name="kernel-debug-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="33384481f2bf7c79a0def7517c53e27701bd2ea49f965abe07b9bb7ff30567b5" name="kernel-debug-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="f9cceb755f2194d08926a6cc62b4d61e0f226679ba970cceb5c2154db3f0d55d" name="kernel-debug-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="3f1f7398c54ded1b4a949eae00bb73115e7314b775decae3cbdcf0f4b237f36f" name="kernel-debug-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="83d58eecc4a93c569ed8e3f1dd17d8e276983db733046c7ff2307473746092ba" name="kernel-debug-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="95539f5cffde87a1c931bddfd9e868bd360006e40bbfdcb2e21edb8e615ef0cd" name="kernel-debug-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="ec09a2a780ecb568366d81b42b2c31fbcfb30bdf3222495da68fd9f318cab5b8" name="kernel-debug-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="75242e79eaa09623e6684834bd8c2af5c298919d5ad7c23c93c84a8df824924c" name="kernel-debug-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="3ed02b1ed57b53fe2b98b8c9299a9dc458273d96ae2642d4db2843c926fe257c" name="kernel-debug-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="354796aefe3f4ed0fef3991441077357541128e7b722759cd0212f786b66b7e4" name="kernel-debug-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="25279591e3eb3bdc961c8477d0cd89161017d3ada9aeb06acf7daee7f3aa82fc" name="kernel-debug-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="81f0d253a28629e1fc709bb255f8bdb626a92fad3645b6161e8b26d2f75d6e1f" name="kernel-debug-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="76701d1e6d1297bc860a02aba0721ea8021155921e137950cc1c2c36aa1a12ce" name="kernel-debug-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="7dca29eb791035c82391358543c515ed12f81da9a426c0e95ef5b2e216d1977f" name="kernel-debug-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="69002c7f1f35cf57ad3543b31703d3b573599a78fb689bd8fa6a53f2c18a1b49" name="kernel-debug-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="f2157c5470af8d03f9de1f0930af60d83e3513f83e5dfebd0667296d99d1637c" name="kernel-debug-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="ae0bc5158adfe821e819c4b1aa8636cc5728fede6924a045f5e2659648e2b4c0" name="kernel-debug-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="04bb76ba0072976adba0dc950b7be96e8a877b9817d8e9c60516e7aecd270f04" name="kernel-debug-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="895328a0f604949324d9b1e8021c6066336ddd76a7f1bc4e2bd3aa77f6f154a4" name="kernel-debug-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="05954f616e0d1fba5286ceadc70082ca2b35bcfa144d239dc0baf9b6e04e285b" name="kernel-debug-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="ea9ad3c5cac1363a6b84fc54e2d269dd2208a2654d9dfc6672f438b171e757df" name="kernel-debug-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="77ea19275bdbbc1698565489c0b6015f23ce16e0dc75b554ab1d160888778c6d" name="kernel-debug-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="0f7df9aebda5bf5855b4a252f95b9891f7d9740c1d1bbfbb469dd8f0b78104e3" name="kernel-debug-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="10e5c899b9006505cdedd5ba07555037712e16f1a816e8d9248dc36cb537fe26" name="kernel-debug-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="ad1aa5e40caf609db0987f7042bbc0e254d0600df86d6b014c69dbc629197c52" name="kernel-debug-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="5ec368283f10b37b12909d8cfbd2b4ca68fd7464290fc6d9276581f31f95b1f1" name="kernel-debug-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="d11647e9ea2edfba5bcac01f491a3dd40f75939e66585999a99a84199be28a32" name="kernel-debug-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="53df699f41913ff8ee8079c5f85248f96b7ac1fb5fc02bfd44f84b3f071506bc" name="kernel-debug-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="447830d9aa22485904525fbebf0733d3a6cda0cb0deced226a9f01bfccc04dac" name="kernel-debug-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="12908b20f83a1d077633bec321f9a772e19c15f7a007ccf51d182600d89670c8" name="kernel-debug-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="5aef1372fea87aa78be7780be98239cf673544254df9812b4d361897c8ab12ce" name="kernel-debug-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="e0b6ab8afa398192f593ea5d6b425c25fcc62ddacd85b50d2b58ca57cb5c2fc6" name="kernel-debug-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="ccd2a1a2dc7e504ed777086194e6a4e83d27fbfd3ef967b49284e3fa264f4cb6" name="kernel-debug-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="2b461238e9412a222bca8d2c83a15b37b9429512453008d624e359aee22bd1e8" name="kernel-debug-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="154d561a837895b2c70cd121ca727bae3ce5a6e2f7096a7324027e5b0336831b" name="kernel-debug-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="c6b7fd1af1d8c101a750f04ee9f560f90791bb16245374b9a773e4a90e81efe4" name="kernel-debug-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="6a738422fc4e861344dcf260fe5f0f97493dfa4edef18225fb2acdbdaae09a07" name="kernel-debug-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="36ae13d210ca31607c80d39684d2faac76dd8ae304575e6cdc2bd4af687e7ee6" name="kernel-debug-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="55f22450278eb619490b10f9c5bc2d08abaf980d637eb26010c6aa63cff93100" name="kernel-debug-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="e051bf68d81e3d4ff79222cdd6b95e3b8798c650c9fc3aec2fb7910b7a58b604" name="kernel-debug-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="c27cdacbc82c5e35926cf48da45943752623e961f5030305f4e928a880ecf862" name="kernel-debug-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="4a6f8dcb01814da68e876808464777e628e437d8f4dac72e757a60f82f30f606" name="kernel-debug-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="63fbc894c802144b335980b475a36cb0b4a1ebd19d99c025bb2b4a86bd5e15c6" name="kernel-debug-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="e1e4530746a702cbb52c3dccdff3c02ad978197cfde47ab037440405a1024f7f" name="kernel-debug-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="1187286021c751cfc5bec224edd023b76009b1cdd6d522dcd6fbe0fe59b2ebfd" name="kernel-debug-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="05f227f228d0cd56e991e3416794b7df74dd1da144907b543ad03e1069e01bdf" name="kernel-debug-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="43f95153d87b0d87e608e22ba0ab41e49b08853068ec29780542eb9b412423c8" name="kernel-debug-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="ea1042d6ebc5cf9bc791d8d8fa3fc13b0f5b0814e5310009b670bf33cf940e82" name="kernel-debug-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="f883d36341c6d2111be63c0fdeecdd486b47ca7eefc7ca4af3c54b725522a06a" name="kernel-debug-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="b99ddb8d1dd998fab107412c3d1551b571eadda5c1d5a4ae64349ddae75e5996" name="kernel-debug-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="069b37b138193a4e2fda9cf23e521f698e8c17364522368248fc2f3c271ae951" name="kernel-debug-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="31b4cacb15aa9eb3e066ee8e2a96d13681197363e485ba8cd5ab132a6d5b3228" name="kernel-debug-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="0bcaec16d35e910fac3c9580a63bda0b12c3996b84e9201bcf9ee8389d783142" name="kernel-debug-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="d07d482625af1d23a53fe8247c57058ef13e37c04580cd86a34a8f9fb39452e6" name="kernel-debug-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="3393f5092e8cdafe1d6c79eb908300de370355272ce33da2b84c82d5eef31b3f" name="kernel-debug-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="d29370c6175595dea59b9fa72a63c7dff80b0f2c7e3f930b2c4c962a3961e329" name="kernel-debug-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="a1ccd272009596c53c7ef1bbd2eca66b2abe9f596e3d8fc893a949b2a913e277" name="kernel-debug-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="71e55941e4cda0a5784a1f4f96a0d7c8fca547b424a0f8f0132ec6dee4f62830" name="kernel-debug-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="b228256d00eb69ba37383c2f1b59223a192e8665c87a8ee4004995bc0d6e468f" name="kernel-debug-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="21fa3de4de7d48f222a769a06ca22b569beea5bce29686195bf475da63b0bf5f" name="kernel-debug-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="f2a9354ada0ac9899422a2f0bc18cd7561149fdf91f4b4c1091d69269040271c" name="kernel-debug-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="2543497e2db02ef7615dc5fe7dc9be8b352b2589c80e687e369d43f888845d05" name="kernel-debug-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="d0c5933ff83615a4583a313088e32a8a358c00ebeddf18b705983489633d5849" name="kernel-debug-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="e10259a6afe2f0b06bd78ccabb3e05b0dcbb8d6a023393656bfbd9947f531f3d" name="kernel-debug-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="c96eb168c4b31166b2dd0c81bb4bbdf06b5f64d16f2620ef9d113a5b2cca5952" name="kernel-debug-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="bfea05d3cb9db193d3a804282fa2d6deaf6eedc759e539cdbddddb9234dbe2ba" name="kernel-debug-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="e95ec25f9457857d0c4e1937dfd1a9d801f51bebf47f00519e2ad07c80589578" name="kernel-debug-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="5b24bfd04316aeb3c97c80164d80ed9f1fbd90fad113cba95af8a2f8d6d4b38f" name="kernel-debug-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="41c534dc27703d5a5df67d755c3b62ad93b46e24417cc49fb21f5d9ab124fabe" name="kernel-debug-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="08ca175f9c34880db11205c3d9fcf5bdf7d8de418ae1de7752696490a8c9e06c" name="kernel-debug-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="318e8c04513253c82744a1666ccaffcfaf5091ea8a53d8fc18ee12e6ad6273ba" name="kernel-debug-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="5cec28d574f0757bdbf37232ce98bd60a2d743db7459054c7ebe67f76d3ef2c3" name="kernel-debug-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="c98928541fa5bc7b136e56da16705c9fd921f4176f43e54d06fac6a9ee61c4ac" name="kernel-debug-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="64a264b52cf9d0442b14722e5191a90c213e2547fe9c046c1a8691c1a3cbdcfb" name="kernel-debug-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="daf3ad6d31be9b06db8c825c5e72141c7bf959d67108f185feab58e6dd02be8b" name="kernel-debug-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="994aba813adea22e07184b8240e8c8cef7f21866435c4402316bfdfcd5991ffc" name="kernel-debug-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="2002a2b3f09626998847987dabf8c3336999502bed8a0e9f28563b2e59584bdf" name="kernel-debug-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="8c6c6ddbee2cd080d918c16a6dcd7ac721c72a098a59535044222e4c7c4c6512" name="kernel-debug-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="4c3df88b2ecea47ffd51060b7dcc96103e8dda88e03479a79f4db576a4657433" name="kernel-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="6f8e53beef7cf24e6ee01a58927c4aa4cf28e61bcd121502a0a40aac6c8c9137" name="kernel-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="9b625fb6a64028c13e2b8e4e330fa6782587466b0cdfabe2e47d7ece46e0dce8" name="kernel-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="cf55639e34ddcedd0c74e338777960cc6553fbde7cb04742e3e772aa09154db9" name="kernel-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="7965f4b2d6573d25b03e1697b065b68af4fde92f0a399b5ad1eedcce4551cc02" name="kernel-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="e82c6213c3cff150c459fbddc01b01b400ef018988a090759eec2de9597c7f85" name="kernel-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="b61526b3595f872267e628f7d8f6d444b8e4468e58728dceb69065836668370d" name="kernel-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="c13340435b71951c7e8f2340d12c4143bc7e3e4cea22546de3f2cb771a6026d3" name="kernel-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="3336141d03187f1d711db41446c2af2cbd129926f574e6ae797f3a3958b92c79" name="kernel-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="f606987ad7809db58b0ec2dbb5cd9416c5df956255428beaaea6d21e73154698" name="kernel-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="c34ede261667493289eb533a29cd34e42f89d06024cd291e12fe9bdfb0f575ca" name="kernel-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="b490015f1bbbccfe675816a3768e4cdcefc322b0d55d94ad5cc0041d2adca2f6" name="kernel-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="d2252d1a4b8ef9cf21b517614bff699e846783915c46869a864787780620b714" name="kernel-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="4733f0cdce1401625806d081a84feae6a477b148a039847825380f199b321f44" name="kernel-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="0669c9a125bc873400f548b8c5987aaeaafb4d30adc832f4d3405d075f8ef908" name="kernel-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="d7dc00647a6dcd2cb30d180e1090a0e72f21277554fe316e0623329f1bd389d1" name="kernel-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="75fd368f9215f912c22ccf628ea9b2761f6af6de72977bb07c400d675d1d84ae" name="kernel-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="d6658a5c441fcf0a8dea353ed16c8b80fc714d5acbf3a5048a5007e20c648421" name="kernel-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="0c38eb512753ec142b8bd1ab06147b3716ac6c77a8d55bebef0fbdb90c2c3c35" name="kernel-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="1c5cb35da226e6c2ae167004e3632040a19d10a20cac201c300fe142624ad36c" name="kernel-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="ea64172280a14c03a405c0a7ffbd6d075c794f7cfe6938adb2967be740f3f012" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="b249d46f378a50cb4433aece34025670ccc5b699d388804c249c72f9fd32fefe" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="7879f797d5bb895319adf6aee62e30d0dc8f61fba866b1af7ee83eaff8a419a1" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="ef18be5402bf7ee01b96318c130316e54bbf80a0469cf141f3ff776b688d5253" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="e12b981027b58602abf89358b5249b6fcb211e6bf8316e9dd3ad666c9f5a6809" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="cbea24514d417add9bdfde9a80375060ebd3c921893b222fbb8d80c2130bc011" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="3d809f9d1480904d12b6812c5d50af31683fbf3f3c2f0540b704f7897e68ee2a" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="c383b3f22a708e3dea1b55bd0b5761730a8d742585ce9b20833b0f4c98c007cf" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="41433546e12631555881b9fb8edf7d5cd67e391d33e57fd91876f2566732e654" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="8c06120c1303ac5e82aefe4d94ceb160717b480b6eff59b634de5a1a2b60d7d0" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="ee38daac470a0fd877e0dfabe8eaf27e54088ad558945ea75afc6ca1ea1bae76" name="kernel-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="27c771ae865f72cad7e4aa127d47b6fd7452a6b3ba32b15a46bba3924a3ee136" name="kernel-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="d778a79e5ccc374ab98ece1896db13a46027cf1837cee51d7580c3a181c89451" name="kernel-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="e763811b297711339a832a36c51bdf7954ee9bc96c6619636bba3813b0ae5ba1" name="kernel-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="fb55be09c832f51b9fa13c80404d4b0cf5056c46b8508b7e8039baede5ded35e" name="kernel-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="c497e11da60bba71408866e97ce7e83247faf16f3594494cf7676d5b398a0980" name="kernel-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="78bb4d7879b8979b043c440d4857e5f138e060ac8cd0d115a0e58cfeb0c50322" name="kernel-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="24ba7b67518eb3929314dd5c31aa0d916c3effc12ff3507723de274c68f5353b" name="kernel-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="559755db6478f88b7bef511d4be9b58a09c756734f93b10e24b7d91c90237e88" name="kernel-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="b26f4bcc89956b605b2f33ba6014dd0678aa66672a6bfcb8f2d35c2ee3328fc6" name="kernel-headers" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="f2b6dae846abe345bfd889966708bdcb9c445c2f0b985f87cc5f3c1c45e54d9e" name="kernel-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="f7061d059939adbbd4d6130ee2742ab0d8d8e94c6e9011f1685e10c6eb2c61a2" name="kernel-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="fe2885e137bfb20b1820249ebee1d5b0cb77f77f5690a15f592b11f660aea47b" name="kernel-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="0d9bbd673594c8d87caa9b6fc88d1d1ec6ce25dd45d2a3b03f4aec1033cb8ea3" name="kernel-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="2102b251788286df7a2a9062e44ee72cef40d55052fb2357ceddf5f2f9634620" name="kernel-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="bfb9440211a40af71d24e1a3534529f0be9058519f6b79c2eb44a83b90112b08" name="kernel-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="fe23dffc66de7e16270abac08019b1efc69ab382609b4b11ed881eae1e7db4c4" name="kernel-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="c57df11e7bd2cd982cf94bbf2e655cc15f7fb318589a6b85c3f9cf635e59b52c" name="kernel-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="1869f33c78b70b51d97ed0f2a8b04c94a91bd63101169bdc5341d9808bf0f29f" name="kernel-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="3c957f2204e535d0e3b90964d272cf4b475813356cba15d72b890b34aa01ceeb" name="kernel-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="1b7a84aa6f429fc59577ce26f70437ea23d5f4fca82ae5a2c87fd38fd2895b19" name="kernel-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="33eaf69fc2359a3e9642058adde74d63fbcc0f86eb54037a72460dc1ada8af34" name="kernel-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="9d549b4e3cbfbdfc90e4b5197b25830ced3e6bf3626c5fa7dbb919595d929012" name="kernel-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="4a1bad2d71e3db4c6167fa1827dc93cfa9aeb477701ebd72dc7dada8eedbafff" name="kernel-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="e21e6c01da4dd6b2f89a338649a68be08e4baea95069bf7016d76864333babe9" name="kernel-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="61f7fc6a7c0418ce49626b3852b91d68fc72dde775801b15658fc161d70c0024" name="kernel-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="282b4b4a19f60d7ec0dc2c049212d74f5f238c429fec2a20bdc8ec406617c56f" name="kernel-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="e5e0a041c72860459dd9911e39ef3eee83d9d6e2ff1bdc5c7c76000e9e00f40d" name="kernel-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="e535cbcb6de68eb797380bef588b8f7f803b0374f2e6e16d1090e43509f352b0" name="kernel-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="f778dd85b5441d961cbc3e66d6dfe962b3bae3d40b892a46de0f6fd22170cb36" name="kernel-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="31ae73e4999f51d42407dbf5f673f87093fb504afbb54549b478b522d1a14883" name="kernel-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="1802e9974886003ff4634a2ab357165be291fd3a448a4bedb2b88fdb72b7137a" name="kernel-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="751d57707a1e3c0c6474e865718933dd745975212fb3c2030c06ed56da1d5315" name="kernel-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="f3b92feeee205f6bc821f3b857ebfc75bca7ae6b08f20411beadc4710d8869da" name="kernel-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="b3e8041a433ab1b623dccc7eed249d4a4e9de79d53ae63e25a8397d30eca50ec" name="kernel-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="34e46e9bc8b926791b22f77e17f7605b9ef820016d7f33f86dcb6285348284ac" name="kernel-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="932698b9bb666ca580281400cfde15f7c3e0345afea60d9c3a1b15cec8bd0191" name="kernel-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="349e8c22153eb6b0d519274b9cef21ad8649d889fa86c41962c7de4d657356d5" name="kernel-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="913e6a12c651a7ed03020f23e4a5fdc02fd83722be9204973376320bb3a35e93" name="kernel-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="56fb5b6481e39e348ad8d260362a1328471c640e46b81e7b24038fdaaef5037a" name="kernel-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="0d8bb2d22ee815c97803c351fc99709cea52557628fd7ddcaaedab3e7032118a" name="kernel-modules-extra-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="4d4cd4a68906475c17f174bec416561a6e42e10e1164890a3940b3fafed5827d" name="kernel-modules-extra-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="e943039a5f6b3f21573be4ea8c84dca65e8ae9477d9076efac4abaa05e31ad22" name="kernel-modules-extra-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="91791fecdcea0f89d6527d913b6294391f4f9b6910431d28ce8efb9190e873fa" name="kernel-modules-extra-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="e582bf3fa129d0b40baed43306acb6ecbb858e0a3f61d41d98a75ebcba9610e0" name="kernel-modules-extra-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="a75bb414ce28aaeb93fe46c3674311a4e191f275c5f752d87388850c135e4048" name="kernel-modules-extra-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="bc91d19d3079389f065d1f2e6f694c971ddd172912129a6d0962adb5e9111086" name="kernel-modules-extra-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="fb5a1952f5e69bd9032513f8916b0edc1ecf4944d7e2e4def3f494fec5cae0c6" name="kernel-modules-extra-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="7d927d72e5fcc9bb00309a850cdb53b9c75aaf6cfacf952d282bb81caba4e2af" name="kernel-modules-extra-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="d29cba3369cc6b990aa649655a9bc176e53a0c3716e68a95d7f4b3ec9de11849" name="kernel-modules-extra-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="7ba0d5bd7f08e4ece05b1f5ccdfc548fa99489aa3c65c9fc66c8cfa0d94b8993" name="kernel-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="e17b09b4d2e75b00a8d5bb9a4e763deb8c53f4f2a519c1df5df78e561c566fe9" name="kernel-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="187991312dced44f00c2183ae978955bfe41926e4105ac9128c9fc84e33534d8" name="kernel-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="eaa65eaaf3bf37984930d5cb82525007cb70f4d320c0a583b7b19dcdd01c73ea" name="kernel-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="b271574099790f0b371d45a85190c5e84d263c38607fddae25b7087c196d7b22" name="kernel-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="a7a8b6056e84dc932a3031af9b4143a53602604e78b30dfd8e0023c1244cf1de" name="kernel-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="0d755046f3b668970a46281396e50a8fb688452e74fb8694bb92457947403665" name="kernel-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="5cee45c4c5de4f836f7d66334853e0b4bbd494c010888e2c58e028c3a9bf4523" name="kernel-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="2d2f6883bda4cb7557e181b0fcc0022ec0bf061b4d93e290dd2181c14214f585" name="kernel-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="9796fc41dfff255c56d2dc53d02a084de46fb459109b787d383d0c65ce750062" name="kernel-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="8bf3912453b866c410fd4e61f187fad97d3e776241b6ff9935f7ef613b36774f" name="kernel-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="9722e86fd75a59e0cb50084f2f15208eccff4f00fb18e373ab6adac2dda968e1" name="kernel-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="cb65403bc61e61556f79e6b2b1f478664fd6455dc6cfe7b1c79bc1a2a8472ed1" name="kernel-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="e95e47f8e070cfa7bc0e622ae101b22b314aa6fb416532ea3b59b65ec4bfa5cc" name="kernel-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="c0559f743e43e51e8f44c9b60040f270274aa5eea0403317cd02f372c118833c" name="kernel-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="3787b553605d99f5553f7aee74829d383299d0130bba51822a9765c22979352e" name="kernel-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="6fa5e8ce48710fdd5fa787b09444a6dff756a298bb2a3b51924b899342e4fea3" name="kernel-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="cbf13a9c1e9e598c8a2237a08aaf71f45bd6db8a26a552e4e18dbdd1100263c3" name="kernel-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="b6cc2f9b1e069f5a924d1a0808ddef809c7fe9d011d19f5853bb6710c83d6d9a" name="kernel-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="9ca9295bb15836b561dce2b67b255d01f44b252ae6319cdb02ff8ea529bf6b8d" name="kernel-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="58ed2d7d4e86d4500754abccc5c8b9be8630b5c9326a72b30236446f0abd5914" name="kernel-selftests-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="5409da9aedda0b7b736da84946b33601519597308ef257dd257c1a07722b37f0" name="kernel-selftests-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="1bb02d3cb5990aabbead4a60ee819eb379f02dda15cbe230427c94ce5cf3bb1f" name="kernel-selftests-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="90224649aa8b62423ed4475dbfce6a33c9290ee95480b4ba96e04fcac754a810" name="kernel-selftests-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="d19c58446b996d0898f966dd0f58f0552435622ada86f8939fcc2689852ea084" name="kernel-selftests-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="c778e2aa377c952b0d1c0aa8bc22afa2a55beb231cb8b58e2b4e367f6c85ae77" name="kernel-selftests-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="c4b111ebf3d1ca1a20bc041337db12b1cd558ba8af1dda39e5a79f5b0c17ce3c" name="kernel-selftests-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="c8e9c8a16af33c8d4ce198ee91347efd53069ae73cbaf405ca8ad08c6ef4ee3e" name="kernel-selftests-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="80a68ee6814342f6c6fe6892728e074110c67c6100fe8f76526b843b01f29fdb" name="kernel-selftests-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="a37460d092be7ab6793a994c573b113362e3699a9953cde110215863fa4309c8" name="kernel-selftests-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="05a464520dc25ca248426a20663e8062a8e45edfe9d949d3e9a735a5a64e22b6" name="kernel-tools" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="ba89dfb078aa7e992c07aca1b6946d54d4e1f5d179b2966334b9f0c284bfb94e" name="kernel-tools" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="4b4a81c7aae07c0c3641c56c21c1339f32f13bb61df5291a660ea5c4e5505383" name="kernel-tools" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="91bf155ca95c2f2ad8c921ef6faac9c24b3a93330a494bb685752963fd4af73c" name="kernel-tools" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="f2422259ad37aeed256a3cef9ef772138cf19fef6edb155ce901704284bfd12b" name="kernel-tools" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="236e71a872a77d88b587c53ef2633264cd0c777812d231e8108382e61b113a7d" name="kernel-tools" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="26cb710b2845ea157e38899ed26894a9a1256b0cc4ed0f05e081092a19233211" name="kernel-tools" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="39305b6c94b27307659ce780d14605e38a9bf9b0538d03acdf5faa538119e912" name="kernel-tools" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="cf663bf73d7f4d6d4143d2b899b4bbf399c3a281210d889e0bb330e704dfadb3" name="kernel-tools" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="34093f007e8b5836d6ed4c8ae08ba11611c133e5f80f77cb955ffe299a615a78" name="kernel-tools" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="f2ec10562fdd6aae9cb116f8faec70fac843885ea802e6cb964a549db1c3f4a7" name="kernel-tools-libs" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="44bc7b237687cff94dd617ff6d271acc26c8f188f14166d7c6e309c633eba04a" name="kernel-tools-libs" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="e5348533f3ecc22e4be248d087ba4cef7a171ea1cf28672474c3135c7ed453d3" name="kernel-tools-libs" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="298536fcd5ba2d68943d74244e1749b916e3684cbefcf5b4cc841e265d2eb80f" name="kernel-tools-libs" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="286af8a2f9d919870ef6c0f9ac83f5086a7c6a29239450a6bd9e83807816f9e4" name="kernel-tools-libs" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="bc168b4886cf407c2fc8090a0595e3a0c42eead2595901d197dfba5720209b1a" name="kernel-tools-libs" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="24676206596a7fc049ac0da1a64a96dcd79832a58d4ccf44627b9b828536da41" name="kernel-tools-libs" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="c72dc811bc790dada90538c75797e805262c0b03f541a19517b20802c9c6f430" name="kernel-tools-libs" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="9cd79eecbd67d3191bcc3fce9b5c7ffe498d1f647c76bf51948a8aa7969511ec" name="kernel-tools-libs" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="931f47251e9307ade68174eee31519e44b37dd24c51ce5a8747325b505faf78e" name="kernel-tools-libs" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="4292ca998e2da91cb8122152407815e7c2f86b711bee5145bec985f1aa5a7ab1" name="kernel-tools-libs-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="c19c7142a1ac62ad1ff7fe1baeb32e9aaec19565b035260131b8641671a43e8a" name="kernel-tools-libs-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="1852f0771bde63d81578512759bab747b9c68fde3288249ff0e4c5d5fe83628f" name="kernel-tools-libs-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="4cb40ced8514b1b2205e4ba874e7dda25af70c3b57c586f6a5c301f87bae23fe" name="kernel-tools-libs-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="740a23ec4f9b8bfdbb07e0e843b3a3ed303ae4ed169f9a703ba12f924b15dc01" name="kernel-tools-libs-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="63244b14c4982b99fe3cb5c134fd6e3805672deb1b6316d3b46769c9fcd24edd" name="kernel-tools-libs-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="92008020b37426c3400bc66f4346df95404382f97b39e19b7a6ee94329d77252" name="kernel-tools-libs-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="a096112698200f4d06b3aee4278fe7064f7d913de42f26b860da97252926f343" name="kernel-tools-libs-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="8f6b007b9c7e5d8c95f4f8420bd5df51dd1e91ea8b9863eadd58c450e47ba1ca" name="kernel-tools-libs-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="e5c85d806c9d486342651804718f0be8c626f76b8bd782eebdfdea26dcbb22a2" name="kernel-tools-libs-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="c1c54a493bc91e2c2cff8356e1e96cca4bf628ada2c467723d2b265578ca2b21" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="c2a0bdbdde7ed3708cad0be784aaef2faaa28474afc43d5e080cd6c72fcfeb74" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="6b426c05d74dc602a83979ca50f70f705d51e31bec2c76c5dbf5f319dbdc3b7b" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="4a45d4d29275e8a28036b4e8de3691fc9a7c84fd616515ebbc8740982f3774b8" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="8d0377fb2e1b93b3aa4c129671fd7f6ea401a0fe0f1ef6f5d6183c7e5a52b128" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="f3554e58a2df08838665e44655bec6bd4b3ff44c7b5584244f1b03f1ec2b6427" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="8736dc848ae9f3107c5ce5f573e5657f54e1fabd459a56e9f272d198ac079d07" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="0485e4da00575b8d919ef8626ff4f9a780bc8ea203d325b51e1915a87e83749d" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="bf5a0c500ebcdcdb65b5929f83bd5f8ea29c31cf44acc595ccc90c5577cb05d5" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="1a14a1cf29fd8be41d98d30b5d8b29bf4b43927d5c1a0aacd5482edf9679c79e" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="e952b45566458543863d33d2acbd4d00dad881f1046e69197e08fa620086dc9c" name="kernel-zfcpdump-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="baa8b2139c361187df5213732e317d806d18d52edab65dac20e6e0fb2de296a3" name="kernel-zfcpdump-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="5d58f5a9afb546eceb7c3af00666536feb3d513e4ff88a792e2709d556e4b1e3" name="kernel-zfcpdump-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="cb2ff900543bde72f79793ea509a4455cadc56d454987ef6bc9cbc7386730291" name="kernel-zfcpdump-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="9581f05ef239ac2cb02ca62a4828e560ff49fd6c082d200877ff34c1ebec9b71" name="kernel-zfcpdump-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="11925683a09b1332218105c05359ddc101983b1249e563fb5702d1981b5e2fcd" name="kernel-zfcpdump-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="75a98355b7fd454fd859c9b6a56db863b57510a258d13fe7f93489e8a8d1221f" name="kernel-zfcpdump-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="fde7dddcf189e0bcca8a4c50ce86b3ead54d2a865fd53d56e8c9d053b2be837e" name="kernel-zfcpdump-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="9e795a1d772c6375af41c555fb04522092d025e643b3db48ea486ce2d5f6fdd4" name="kernel-zfcpdump-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="9b0c8955d068bf0d4a052817346584f4615dc0be858d13f42436cbec1404283f" name="kernel-zfcpdump-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="914dd52f9c7a4a9d3a5077c5aaeb9a12f5b4d078b422583aa8058c5563d9d4ce" name="kernel-zfcpdump-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="da89a89ef81b66017e921b6bbf9c012647d1ae589dc7025969bedcd21f9e136f" name="kernel-zfcpdump-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="dc5682353be492ee9fe639748fbf0bdcf07dea7136c30097bebf2b856155593f" name="kernel-zfcpdump-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="54a72973fd709fc1ebab42ed69b62cd4c363ac17667abaa8d3f09762af5d55d3" name="kernel-zfcpdump-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="845a3afcffb0bb75208f5818923fc2ded2926c45b705d1965f5d734c23b6267f" name="kernel-zfcpdump-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="2863a1a291dcc23072aeb1cadf1034f546b418c9978430d6fb4436475f1291f4" name="kernel-zfcpdump-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="d3e20a4c15c231b096219bbe726cb014221a72f0ac3bec503930691c7da4f4db" name="kernel-zfcpdump-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="9396c7e845b07de3dfa58160bbd272d009018b1cdbeb6c37f61185f1ff4efd16" name="kernel-zfcpdump-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="51c3187a645a5897b7b766b752cc72d8dd21fcd088c14015a81414830b978554" name="kernel-zfcpdump-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="6b342d5708ac823473cb93cbbbc2615937677f0ba5ec58a24c2b63d0b1e4d4be" name="kernel-zfcpdump-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="82a92988287415aa5a5ae29f86bca6c23024b6ab4f3fb40c59a932fcaaf994a3" name="kernel-zfcpdump-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="7591b235b8868ca5c8e46a4f9b8d60344c32adb13fc90a1f9905d40cadcb537d" name="kernel-zfcpdump-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="fe3bf39ca89ee3cb0797d8a1311c2506424d194cb64823e238186a809149c3cd" name="kernel-zfcpdump-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="956807ca4a81be87f192b5bc210b6c48d5417d85068dbc207d3a8ed598115b83" name="kernel-zfcpdump-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="f8e49a361aeda966cc6714e71bcd53a2ee191693b24600ce73b3f8d99db52781" name="kernel-zfcpdump-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="44178d03a51d702b6440ce1bafd048f492d95c8e0f8b274a6a7cf2cc07813233" name="kernel-zfcpdump-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="90f29173352385dd71e97dc6d8568d9916ae2cb1b4ed5797cc31bc8f82472875" name="kernel-zfcpdump-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="80d541ad9baf29fea589cec73d62b23318246bb95c3a8212f41fb069c351a4fc" name="kernel-zfcpdump-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="2e9e895b6ace9d2bcfa42b12b59f28892b7cebf61f9c0d550f01a3f0b787b382" name="kernel-zfcpdump-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="02dcf529e100c358a5ec2f32813e45b22b4ae9a27932c9923b77d813d9ec13f0" name="kernel-zfcpdump-devel-matched" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="13a05a6c8505cd8fb078b2732dfea3fb14264a1f43a991ecadacb5222f52d2ea" name="kernel-zfcpdump-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="9efb03487e0292d2f7944cff9127d09c652ecc6083db9cfa58444e1696a941b6" name="kernel-zfcpdump-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="3321e9f0a0750548e030a0d2b0ff2b72f4cb34946ad23d87fc8c89541d342f21" name="kernel-zfcpdump-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="79e6f3625e9d4904afb221971f89f8f1deb29d2b8d0e0c072189b8b73672fd65" name="kernel-zfcpdump-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="3691025e9c1b02198096ac883ecbd4b70b9a6d4b227b1884c7b9b51542db8256" name="kernel-zfcpdump-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="5a142ac88b7efcf0b58f0d9584752df30f67bdccdbc0ac762562f52886c32f0e" name="kernel-zfcpdump-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="e6675f0045ab648721bf7492e424f9a99a3bf6f3187ee69b99fe8be8857d4271" name="kernel-zfcpdump-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="f2a82d0780e89b888a4c775a9c497104e0f6847a88a95b5d2940965235d4121e" name="kernel-zfcpdump-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="9f37c2a233cd4ed35be1bb86a9957b948eb839c4fb0294614e04732ca1fcbd58" name="kernel-zfcpdump-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="1514a18b82f8ae85b3d54b9d51f10fa162d7e2713157fb5fa6d4475bf6dfe19e" name="kernel-zfcpdump-modules" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="5887b3a16f7e27f49815bd7e6b1edf05c180d575163317b876c0baf803bf82e3" name="kernel-zfcpdump-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="b9d5327aed6652ca5c9bd931b1f08229f7870a9c5fe9f7c8771251917f25908c" name="kernel-zfcpdump-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="eda09f9edc9cc6e79cefb52e108f175c9813a613b791191c453a2a2a6b22c2b6" name="kernel-zfcpdump-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="73fc54a477b27dad0a53e75d9ad53d3ddbbb7117481398604f1d23382bed5b49" name="kernel-zfcpdump-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="bfe0a970f9117939301424360e14f8f6cb03563bc6e6bd7869264aab2c69de0c" name="kernel-zfcpdump-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="9152f81a89c0411a151ce1bb2f5f5207065d735b33dc2295cd0e7f2df0e8cd9a" name="kernel-zfcpdump-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="9b9e9f0ed3929dedc33c3e83a8a23a897e3d095a56561541014a1fce0cf7b6cd" name="kernel-zfcpdump-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="d6b1a16b90437f24616368b7b7f53b841949d2a9ddced60cd858d2f5470b4cc4" name="kernel-zfcpdump-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="b153fab4903db7f630040833a8003f7d65b8eaec9c594731a3dfa6e216f4398a" name="kernel-zfcpdump-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="6e18557398f5f1433bd78d57aec7752e5be3f56e2634e76830510edc1643328a" name="kernel-zfcpdump-modules-core" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="09602f19b2cd1e126c014ebc2dfbb00b7b99620ee0e948b2eee500c928300a3e" name="kernel-zfcpdump-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="37f08cff8eea487985bf45fb9f2c8ac110c12805317576fa7a0df6706cdb8c9a" name="kernel-zfcpdump-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="2cae124fcadc176f656c64c328fee5112253a255fff8c2ce3412a055f1976f0c" name="kernel-zfcpdump-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="e815511145b3f5f5bed1da34c774c098c9ce70628658a8db88f2af1d75312b11" name="kernel-zfcpdump-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="705b420b89496f976c2a756d09a1757f26788a172371a99be46cb9f00c65a28c" name="kernel-zfcpdump-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="f76691a83141c762a103370cc5010f895654b0be3b5bb3f62b26b1f3b5f5e650" name="kernel-zfcpdump-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="c56a5f842b1dc3c33ace0aa81f2a6eb692e39266d52e0b81a7bb6fdab307d25b" name="kernel-zfcpdump-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="327dbf21943541872df062b1faa317c2ac68146ffadebf74acc988f81ecac8fe" name="kernel-zfcpdump-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="b30909227f97ba2d4539ffa6f7d68909aa0adaba8477dc6c20f27972df9a49df" name="kernel-zfcpdump-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="d3bd48312990be9fdfd1252f76c39621173f338573c2ddcccbcbd1ed37033f4e" name="kernel-zfcpdump-modules-extra" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="cb215443b8413db3eb768e7e9da19cb09705579c48360d5dad2b4e7357963221" name="kernel-zfcpdump-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="51dd804e85ed994cd75d4d7abcfd3c1c39954c79aa192e8b893c607fcf6c4e7e" name="kernel-zfcpdump-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="d4b3bc973712371ba6ece45f84e661be32b1a934c11cf8ef17e9898cf013bfea" name="kernel-zfcpdump-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="26fee8231b0724b7bfb6bb8f9a6de251c369543b1c2c5533b5dd204a88098ad5" name="kernel-zfcpdump-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="53aa76ed58c36bd5c72ec2c8039f537798cf3cc50560547949b9a75a11737407" name="kernel-zfcpdump-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="bd08fe8e1c7f0b849b2d7f6149abbcbbee9b212107108ffabdde4f3fe1339b57" name="kernel-zfcpdump-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="924539a04882d5a70a1468792f9a5e61a2fa878b163b8c789b61a95e93fea446" name="kernel-zfcpdump-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="dbc9bb6e504e8260bc374a5f33e5032b4f3c1a6aa958c7776cf2f02aa97b5b10" name="kernel-zfcpdump-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="5831aa88eb913e2f9ef2c4f438bac038a5ee52c4089648255a0111d92aa40fef" name="kernel-zfcpdump-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="391eba9dca7689e0806729bade37bd629bca2de57b19b765e3ea6303a4934d80" name="kernel-zfcpdump-modules-internal" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="c90f6a93559625a0c226daa092ab776114c92a39ac3cfb31c86cb11fb6d398be" name="kernel-zfcpdump-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="ed9ec6847c2e99bcfa1d5370e85e1cd250408aae31a73ebd232060ea4358d9b8" name="kernel-zfcpdump-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="625a0044b003ac014817f3c76948dfab4de0262fbf6046a3162752f76ce3b209" name="kernel-zfcpdump-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="7ab59e7380973484123756a2801bcd0ccfac87d95b4cbed3341888aea8b163f0" name="kernel-zfcpdump-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="7d98d13423b8de1fd8d03db39df412208e91c531287477ac5192f7e714b058a7" name="kernel-zfcpdump-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="d2c76ff8e5992aef1a7f570156b3f750304ca19c8c9943fc37156918d95406c4" name="kernel-zfcpdump-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="cb1e1ce2756688c09c2bd1b584beef355740580222d2326e57c0237b9367dc3d" name="kernel-zfcpdump-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="e4f341ba9fea63a3da3994fa5c2cdf0c675f7fc83b5475b31801376d1cf99369" name="kernel-zfcpdump-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="a252d0b382343a92c0e14efec7959a082ccce6b46ae8efd1b76a227e3fc6529b" name="kernel-zfcpdump-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="ead4f9fc535fef57b3402a897d37443772a69798b7b7ec53c9cd3f5b6b65509f" name="kernel-zfcpdump-modules-partner" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="4ecba7f347d321722751e226d04fcc79c4f6a83cfadc96e0b16bb84406979100" name="libblockdev" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="b35bda4c2b61d8e257a256007299b7969ea6c67993b4cc380e9bff1a63034c40" name="libblockdev-crypto" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="459d3f861ceefae471603f9203f346fce843a81cb06c99039bd85fc2cfa99ae1" name="libblockdev-crypto-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="06f48e53be803197c2b4232ee60e1f48671878f10eeb24ae03e8d1b075e355a0" name="libblockdev-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="f3a375f4e0bb314bde6850ff0199c2e70534312b7b3180f1423d61927f289423" name="libblockdev-dm" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="174f02bc5f63ac3228bff7c18e0e6813f6aa93a833ec4bb56875f9576ca7a8ef" name="libblockdev-dm-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="ae1394e13b95512558da64c262395f96b7c211c7e3fc706e6949eb2c4412e483" name="libblockdev-fs" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="391173b1189b7fedc362772fbf6c62cbc83d5a07c82fa39f97bfe0ceefb6f18b" name="libblockdev-fs-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="ac0c7489f2b017ff75261bce2b45cac3347b0a42d27226f4fee657382a3b8c60" name="libblockdev-loop" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="ff604273bbdd9445bcf58a802d65cdc1ed0428704acdc77dbeba42c75f0e55b4" name="libblockdev-loop-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="372b938aac1cd20b09184f17392205e5ae70bcc3f4e6f0afd29f01d44f87cd23" name="libblockdev-lvm" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="cda76d6e1ac2d4f7e38922965028c0d03f78ee33350126728941293828ddc337" name="libblockdev-lvm-dbus" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="c69850f757d48ac19bb70c89ee3097116aa6a9d224dcb5ddde1bae505da86d85" name="libblockdev-lvm-dbus-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="6591556b3a0d149ec6d5ff2e9f96013e12d2439e445d9da57dc4160d465ae4e4" name="libblockdev-lvm-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="6a3f768bfada977b2d9ba3c3398e630b77bfa9ba0f787cf5a1fdaff389678c80" name="libblockdev-mdraid" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="f9e81c6dd0422d66f6befd556df493e1c74cf8ebd695de386067a51c74f5643e" name="libblockdev-mdraid-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="7cacc9113e017d2d48130426a150c86354a6b1782be60bc09b261fc380f88f9e" name="libblockdev-mpath" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="f080ebfd9f081f2ae8d9f5ea296522fc17a7c1560f768b0b0a41fb354d1cc4b9" name="libblockdev-mpath-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="cf6988aa8aeea91f991f9e6bf956fd47f0a37ebc827b5614561b3d3cecd3685e" name="libblockdev-nvdimm" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="7d7e04f75c8f5eebb5ab184bb7ffed659191214aabc2522b08e200a650fd51a7" name="libblockdev-nvdimm-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="7b2792691da5c3bcc11edbab686ebae88beea4637ee57cba96adbceac05d3907" name="libblockdev-nvme" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="860f5523d5cc151ff859d4160cd0d8522ee6ebc41a6dccdf0ed04b0e6f14b95f" name="libblockdev-nvme-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="1aa4eba4c4aff56ef02613ba54d0936913311377053858e9384830f38c836c5d" name="libblockdev-part" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="5d9513fbe05ebd517d479fd14c6044f5307ede61cf2edfd720fa78f7dac99d6e" name="libblockdev-part-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="0729b94d89e37f68b9f73f060ddb977270503d052b776393f3069dad0310737c" name="libblockdev-plugins-all" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="e8ce7be13c13f56ba9a9ef9d3344edfe4e8f34ee3a562543c6f9a9bb329c6936" name="libblockdev-s390" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="85941d5348944927931a0c26bd36989da5af367cc63d4b6184a730192f30820e" name="libblockdev-s390-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="9bb5792414228a81a5bcb40d80770e958e676d7d36f9605cecef52155b7a24e4" name="libblockdev-smart" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="d32101e309faf87412e91d5ebc9bccf5d9d5da12252024f558dff4958773e8cd" name="libblockdev-smart-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="35c6691be9e2995756340244318de53034340012fb18f73e823248e30567319e" name="libblockdev-smartmontools" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="787b4aa97614fc1d5d1ef9c8c0d8c4ddd1259fc6d2659cd851cd329b3782c45b" name="libblockdev-smartmontools-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="23224a1f6217f3287ed781beaafb280c3d3f1139fce1b7a7313b4621b41ffead" name="libblockdev-swap" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="47bb867f12f5cfd70dcfa1ffc80f15bc4ed9801228d258a566eaa6cd9f4e6374" name="libblockdev-swap-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="8ae24130e635d23e931f3afc3e1f5a66df1f7b90b4857641f0d00f78f9cd016c" name="libblockdev-tools" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="7755224ae21bbd4b4ec2083a9321e74de8087fbd92fb708b9f78d93f11f9eebf" name="libblockdev-utils" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="af52d57125738a4e2ce9b56a17bae56c557cacfc4a4b47017a0a8710a8ce916d" name="libblockdev-utils-devel" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="ff9ff9c3500b58cae19827269fed3964afc9f23f93fbd60861d0b3d84014e49d" name="libperf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="132ea6aab2925c16aa4b3b36dab9bf90ad6476250f4e0170fd6c684cf7998212" name="libperf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="221e04d9160b040f85aa7de1b5779996506fe5db9ed2b411a67b96e5b34c6748" name="libperf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="28d46d782288d89c86edf35337d259db508be902c6bcb6766e8a204e1b1a32bc" name="libperf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="4c2e8121f92854916325ccabe6ae77c525056ca826b24d8bc1ef82defefb055f" name="libperf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="c5d32c98363d15dd33621c96848f4ff8fb06c4658e047111b27b2451a2f66212" name="libperf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="10ddfd99b3a831147213b30ca9ec47c5a41090e021a2d643bd79cba592f5bcf4" name="libperf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="d5ad32381bb06a6d531de43f0dc97abf1799021363ca3652a121d87ae928bfc4" name="libperf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="4bb21ee1ee8bb9a8376afa2b3d830d4a6ed3c5ae2a21572bebe93084ab4e6872" name="libperf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="68492a0f39f01d8440b214b5ab13fd75cccde98b3b785bcced1a79d4608d02f2" name="libperf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="55b30fcf23af085b84da7c4a43ddebea9db3e0af93d6cb81c8d91242ed526348" name="libperf-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="25caac7861ec5d0ccfa9fd65f4f7f2c33a40a5d4e04bf505733eaa978ae7a1d9" name="libperf-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="02459d4bbec823e2f96f5f4865e806203267723885e293c5fba2196fb1bb12d1" name="libperf-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="867898c62c9099cafbf707c38d4089cbf69f055ba7632c8cfb5aaa50c9251699" name="libperf-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="f7cd246b59a34fe9827cb9435b440977c6c1ad3270a2bd946f50da7ad7e0f0ca" name="libperf-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="f11b96215914a8410a34a70da77aa47a00c5ab653155977142f8960a290fa075" name="libperf-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="1cdb33bf6ea471a4423d294ef960b3d8a11e47796399777c21341138bebe56ad" name="libperf-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="e6dbae8f057113ac34fe89c4a7bed9d31ab96948b5f12aa623ee169ad592f52e" name="libperf-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="87026f2a8e351347c43f06a04ab1c73ac41c64068c0cd1cd8fad827b0b033203" name="libperf-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="83dd8625d571bf4c14c814521770adcb81def6fa2dfa68397c2bfd3af6caa464" name="libperf-devel" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="f8fabf6b3eb53cafa0d4d32201a8d5d8152b17fca31b1fab54ce2b7bc8358e0c" name="nginx" arch="s390x">
  <version epoch="2" ver="1.26.3" rel="2.el10_1.1.alma.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2:1.26.2-2" date="1734436800">- Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
  start nginx@foobar.service" to start an instance of nginx using
  /etc/nginx/foobar.conf as the configuration.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-3" date="1738670400">- Add zlib-ng patch to fix RHEL-77911</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-4" date="1738756800">- Use systemd-sysusers</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-1" date="1738843200">- New version 1.26.3</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-2" date="1770811200">- CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
  on TLS proxied connections</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-3" date="1774958400">- Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
  file modification via buffer overflow in ngx_http_dav_module</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-4" date="1774958401">- Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
  to memory corruption via crafted MP4 file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-5" date="1774958402">- Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
  undisclosed requests when ngx_mail_auth_http_module is enabled</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-6" date="1774958403">- Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
  Code Execution via specially crafted MP4 files</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2:1.26.3-2.1.alma.1" date="1778673600">- Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via
  arguments in replacement strings</changelog>
</package>
<package pkgid="1a8226d2cd315a1207f5be8b4bcdc5790d247b6ef1169e1f4e6e449a7d3151d0" name="nginx-all-modules" arch="noarch">
  <version epoch="2" ver="1.26.3" rel="2.el10_1.1.alma.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2:1.26.2-2" date="1734436800">- Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
  start nginx@foobar.service" to start an instance of nginx using
  /etc/nginx/foobar.conf as the configuration.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-3" date="1738670400">- Add zlib-ng patch to fix RHEL-77911</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-4" date="1738756800">- Use systemd-sysusers</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-1" date="1738843200">- New version 1.26.3</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-2" date="1770811200">- CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
  on TLS proxied connections</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-3" date="1774958400">- Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
  file modification via buffer overflow in ngx_http_dav_module</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-4" date="1774958401">- Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
  to memory corruption via crafted MP4 file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-5" date="1774958402">- Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
  undisclosed requests when ngx_mail_auth_http_module is enabled</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-6" date="1774958403">- Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
  Code Execution via specially crafted MP4 files</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2:1.26.3-2.1.alma.1" date="1778673600">- Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via
  arguments in replacement strings</changelog>
</package>
<package pkgid="040aaae7a95811ef69071d0622c9edaeef559265df3b559362a6346015d0fa9e" name="nginx-core" arch="s390x">
  <version epoch="2" ver="1.26.3" rel="2.el10_1.1.alma.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2:1.26.2-2" date="1734436800">- Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
  start nginx@foobar.service" to start an instance of nginx using
  /etc/nginx/foobar.conf as the configuration.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-3" date="1738670400">- Add zlib-ng patch to fix RHEL-77911</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-4" date="1738756800">- Use systemd-sysusers</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-1" date="1738843200">- New version 1.26.3</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-2" date="1770811200">- CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
  on TLS proxied connections</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-3" date="1774958400">- Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
  file modification via buffer overflow in ngx_http_dav_module</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-4" date="1774958401">- Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
  to memory corruption via crafted MP4 file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-5" date="1774958402">- Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
  undisclosed requests when ngx_mail_auth_http_module is enabled</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-6" date="1774958403">- Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
  Code Execution via specially crafted MP4 files</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2:1.26.3-2.1.alma.1" date="1778673600">- Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via
  arguments in replacement strings</changelog>
</package>
<package pkgid="f509dd8d5aeecf046368fc11c0e5791cc2d6e008aa0220776e50fe95b57ee0e0" name="nginx-filesystem" arch="noarch">
  <version epoch="2" ver="1.26.3" rel="2.el10_1.1.alma.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2:1.26.2-2" date="1734436800">- Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
  start nginx@foobar.service" to start an instance of nginx using
  /etc/nginx/foobar.conf as the configuration.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-3" date="1738670400">- Add zlib-ng patch to fix RHEL-77911</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-4" date="1738756800">- Use systemd-sysusers</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-1" date="1738843200">- New version 1.26.3</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-2" date="1770811200">- CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
  on TLS proxied connections</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-3" date="1774958400">- Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
  file modification via buffer overflow in ngx_http_dav_module</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-4" date="1774958401">- Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
  to memory corruption via crafted MP4 file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-5" date="1774958402">- Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
  undisclosed requests when ngx_mail_auth_http_module is enabled</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-6" date="1774958403">- Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
  Code Execution via specially crafted MP4 files</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2:1.26.3-2.1.alma.1" date="1778673600">- Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via
  arguments in replacement strings</changelog>
</package>
<package pkgid="cbfbb322d330a08dc54a620fb92b928ea0aef001bae113d295e47c261f5688f3" name="nginx-mod-devel" arch="s390x">
  <version epoch="2" ver="1.26.3" rel="2.el10_1.1.alma.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2:1.26.2-2" date="1734436800">- Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
  start nginx@foobar.service" to start an instance of nginx using
  /etc/nginx/foobar.conf as the configuration.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-3" date="1738670400">- Add zlib-ng patch to fix RHEL-77911</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-4" date="1738756800">- Use systemd-sysusers</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-1" date="1738843200">- New version 1.26.3</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-2" date="1770811200">- CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
  on TLS proxied connections</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-3" date="1774958400">- Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
  file modification via buffer overflow in ngx_http_dav_module</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-4" date="1774958401">- Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
  to memory corruption via crafted MP4 file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-5" date="1774958402">- Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
  undisclosed requests when ngx_mail_auth_http_module is enabled</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-6" date="1774958403">- Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
  Code Execution via specially crafted MP4 files</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2:1.26.3-2.1.alma.1" date="1778673600">- Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via
  arguments in replacement strings</changelog>
</package>
<package pkgid="fb0d0d4308a6edca22df5e1ffcd21bf5c5b5006ef1cdd508e0119696dc0d1828" name="nginx-mod-http-image-filter" arch="s390x">
  <version epoch="2" ver="1.26.3" rel="2.el10_1.1.alma.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2:1.26.2-2" date="1734436800">- Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
  start nginx@foobar.service" to start an instance of nginx using
  /etc/nginx/foobar.conf as the configuration.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-3" date="1738670400">- Add zlib-ng patch to fix RHEL-77911</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-4" date="1738756800">- Use systemd-sysusers</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-1" date="1738843200">- New version 1.26.3</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-2" date="1770811200">- CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
  on TLS proxied connections</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-3" date="1774958400">- Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
  file modification via buffer overflow in ngx_http_dav_module</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-4" date="1774958401">- Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
  to memory corruption via crafted MP4 file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-5" date="1774958402">- Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
  undisclosed requests when ngx_mail_auth_http_module is enabled</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-6" date="1774958403">- Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
  Code Execution via specially crafted MP4 files</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2:1.26.3-2.1.alma.1" date="1778673600">- Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via
  arguments in replacement strings</changelog>
</package>
<package pkgid="bfe0dacf5515911bf3cfaca43357b42bdda54cd4d9149c9c2ebdd3ccfcda6905" name="nginx-mod-http-perl" arch="s390x">
  <version epoch="2" ver="1.26.3" rel="2.el10_1.1.alma.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2:1.26.2-2" date="1734436800">- Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
  start nginx@foobar.service" to start an instance of nginx using
  /etc/nginx/foobar.conf as the configuration.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-3" date="1738670400">- Add zlib-ng patch to fix RHEL-77911</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-4" date="1738756800">- Use systemd-sysusers</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-1" date="1738843200">- New version 1.26.3</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-2" date="1770811200">- CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
  on TLS proxied connections</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-3" date="1774958400">- Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
  file modification via buffer overflow in ngx_http_dav_module</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-4" date="1774958401">- Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
  to memory corruption via crafted MP4 file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-5" date="1774958402">- Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
  undisclosed requests when ngx_mail_auth_http_module is enabled</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-6" date="1774958403">- Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
  Code Execution via specially crafted MP4 files</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2:1.26.3-2.1.alma.1" date="1778673600">- Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via
  arguments in replacement strings</changelog>
</package>
<package pkgid="0e0f2e9017f7256c0422b847360a9828c6f660fbc949da6964994a4836187db1" name="nginx-mod-http-xslt-filter" arch="s390x">
  <version epoch="2" ver="1.26.3" rel="2.el10_1.1.alma.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2:1.26.2-2" date="1734436800">- Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
  start nginx@foobar.service" to start an instance of nginx using
  /etc/nginx/foobar.conf as the configuration.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-3" date="1738670400">- Add zlib-ng patch to fix RHEL-77911</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-4" date="1738756800">- Use systemd-sysusers</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-1" date="1738843200">- New version 1.26.3</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-2" date="1770811200">- CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
  on TLS proxied connections</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-3" date="1774958400">- Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
  file modification via buffer overflow in ngx_http_dav_module</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-4" date="1774958401">- Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
  to memory corruption via crafted MP4 file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-5" date="1774958402">- Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
  undisclosed requests when ngx_mail_auth_http_module is enabled</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-6" date="1774958403">- Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
  Code Execution via specially crafted MP4 files</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2:1.26.3-2.1.alma.1" date="1778673600">- Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via
  arguments in replacement strings</changelog>
</package>
<package pkgid="347247023989241799d3388dc8e453000ff5e9aaba09996063a5ff2fef4ba444" name="nginx-mod-mail" arch="s390x">
  <version epoch="2" ver="1.26.3" rel="2.el10_1.1.alma.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2:1.26.2-2" date="1734436800">- Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
  start nginx@foobar.service" to start an instance of nginx using
  /etc/nginx/foobar.conf as the configuration.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-3" date="1738670400">- Add zlib-ng patch to fix RHEL-77911</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-4" date="1738756800">- Use systemd-sysusers</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-1" date="1738843200">- New version 1.26.3</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-2" date="1770811200">- CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
  on TLS proxied connections</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-3" date="1774958400">- Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
  file modification via buffer overflow in ngx_http_dav_module</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-4" date="1774958401">- Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
  to memory corruption via crafted MP4 file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-5" date="1774958402">- Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
  undisclosed requests when ngx_mail_auth_http_module is enabled</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-6" date="1774958403">- Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
  Code Execution via specially crafted MP4 files</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2:1.26.3-2.1.alma.1" date="1778673600">- Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via
  arguments in replacement strings</changelog>
</package>
<package pkgid="d2797c4bff93171ad2199e8672fd278f4276ff769e55ef278809160f2092e458" name="nginx-mod-stream" arch="s390x">
  <version epoch="2" ver="1.26.3" rel="2.el10_1.1.alma.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2:1.26.2-2" date="1734436800">- Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
  start nginx@foobar.service" to start an instance of nginx using
  /etc/nginx/foobar.conf as the configuration.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-3" date="1738670400">- Add zlib-ng patch to fix RHEL-77911</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.2-4" date="1738756800">- Use systemd-sysusers</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-1" date="1738843200">- New version 1.26.3</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2:1.26.3-2" date="1770811200">- CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
  on TLS proxied connections</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-3" date="1774958400">- Resolves: RHEL-159546 CVE-2026-27654 nginx: NGINX: Denial of Service or
  file modification via buffer overflow in ngx_http_dav_module</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-4" date="1774958401">- Resolves: RHEL-159525 CVE-2026-27784 nginx: NGINX: Denial of Service due
  to memory corruption via crafted MP4 file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-5" date="1774958402">- Resolves: RHEL-159433 CVE-2026-27651 nginx: NGINX: Denial of Service via
  undisclosed requests when ngx_mail_auth_http_module is enabled</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:1.26.3-6" date="1774958403">- Resolves: RHEL-157874 CVE-2026-32647 nginx: NGINX: Denial of Service or
  Code Execution via specially crafted MP4 files</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2:1.26.3-2.1.alma.1" date="1778673600">- Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via
  arguments in replacement strings</changelog>
</package>
<package pkgid="81a714dfe70bd2674b70d280bd6eed3986f196528f4a1edd34c1ac372b383df7" name="perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="e2ee931ff6310da3ba3f2236f6fa9c5887f0b7dcbaa636f01dc95522d11500b2" name="perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="e77281632526b174b53b72379ab64f4543abf7c4f8c461cf05a396b32978c50d" name="perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="bffa27d9bee0e8c1905150828a84d145cae8e2e01c31bf5398b9dcee16406819" name="perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="bbdcbadb423d8c69d368a039117454c6fd9ef7ece3a417fbe919d551df728f4d" name="perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="4a24ec0f6672659e30b19650df3dcc62111d6d2b956463a9b4dea39e7cacc6ef" name="perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="51ac285e0d7ade5a74eca2f7a67014ea30735b996a164dddb3bed7232f86ce02" name="perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="ac16ea932a92b263327f9f695feb25acecb5585cd13695b4a2156f77aaa1077f" name="perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="2b0dde35de47a4fc8fe9e3dd36f6685ca3254a59bfb0d43342169a65b1812547" name="perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="64b1b9f5d468f8e33c4a5442b98fa6f15d7707ca36014e681a468d0750d5e724" name="perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="821d182221d32f954b42670c565ce7f84e5b96384164472ecacd04790be50396" name="python3-blockdev" arch="s390x">
  <version epoch="0" ver="3.2.0" rel="3.el10_0.alma.1"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-4" date="1717070400">- Check also for aliases in bd_utils_have_kernel_module
  Resolves: RHEL-37249</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 3.2.0-3.alma.1" date="1750248000">- Fix CVE-2025-6019 don't allow suid and dev set on fs resize</changelog>
</package>
<package pkgid="074fa1d03e44a2c34269d52716fd28c8524e330106c144dc328f99e4ec05475f" name="python3-perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="38bde7af4fd773386f3cb1ca0a963eab4559d1b50d5013a8ae664e0fa96f7859" name="python3-perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="7a0e2a3e7cdb3aefc319c732751429422b8127d9f481bac3eab9c27ffe5ab22d" name="python3-perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="1854d8bc4ca2be7cabc3ae84740fc9c8e8462f0406dfd6cb47aa3742e1b1f034" name="python3-perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="50c9205b42c84dee35298fe103edf8ca7294b33f900ab2c1c95c58f15024145f" name="python3-perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="d2363786957d9719e49496edfbedfe0300ee99b0b1f496e4e5c5712eb12234aa" name="python3-perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="6b2ce19bd1d61d69bbd6a00178a738f2666d97ff42ab78659b161bd47c6e316f" name="python3-perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="71f79cb2242d7e8b977fdb742538188dfe5875936fc04c96713aabbeaa351bf5" name="python3-perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="156fb9bf31904e88c7f14aee34aec75c67ba8f2c1560e238ff6719e61c745680" name="python3-perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="fc3786f620a99a18b70f5676f55c6a01f1d3f8aa8896af88612efcbdc34535a6" name="python3-perf" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="c2ec041fdc307c8d746a3081df257b9cd6a486cba6bfb01ecc4f9533d24039fc" name="rtla" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="eaa509f69e102a7ee7e5804bc7bc023a945bf5b51db0a3fd58b7807f7618f86e" name="rtla" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="be3029030277374c5dd121c65e6c9dfd65818ed59ea47c47c5f7afd005ea967f" name="rtla" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="a54e750efc38071066832caa5db87d546fb8493d2b9d2b157846a3472abc4ace" name="rtla" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="57354fbff07e0de7469470e8a161a731c594ac2af3c193af1b3f80704c394f54" name="rtla" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="64e3c70d26d85dd90b99472417d50c513e523e6eeeb2d39f7c707dd89967ffa0" name="rtla" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="f08aa9dc4735e06eb4e3247cd7536f555262589674d1da2157e83418a423cd9f" name="rtla" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="13a050bca4294451aa1aefc043905ae01aa86ef1bcbce22f0a41434b95f95c1e" name="rtla" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="b16b18afda18f0408d695bbf57e47b50b2fa6b8ca11cf7964c544e488fb0025b" name="rtla" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="291ee9822a588d0eabe01392ec877575ed2cad644484e8bc99e8e635c2bd1816" name="rtla" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="f1c2fce8a782bb68e986980fc1c0582bda8f4cf6a32525e1ee637aa55ed982b6" name="rv" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.52.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464000">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464001">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.52.1" date="1777464002">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.52.2" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl</changelog>
</package>
<package pkgid="24f0b7648335deaf71b1636abebc2bf6f93c8a2655395d7e45481083ab0e1c9a" name="rv" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
</package>
<package pkgid="874082505de7f7765c59d9e15485e6160561aeeb2399a2ae0f51f0bb5687721e" name="rv" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.55.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068800">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068801">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.55.1" date="1778068802">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.2" date="1778155200">- xfrm: esp: avoid in-place decrypt on shared skb frags</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.55.3" date="1778155201">- rxrpc: linearize incoming DATA packet when it has paged frags</changelog>
</package>
<package pkgid="fca9a043fadbe9455d972e034adb91f5e8ae04fc1c3962ebd9d6382c0f48b3b4" name="rv" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.2.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
</package>
<package pkgid="1a5ed06f93333feff2055679faf39a1370e7f9dc826e78ed7259e52c6515dd32" name="rv" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.3.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
</package>
<package pkgid="ad06a19c3ad1c0f7f6607df11062a9b3f9099fd334d261c1fd83d8fea93debc6" name="rv" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="124.56.5.el10_1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.56.1.el10_1]" date="1778328000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174548] {CVE-2026-43284}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673600">- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673601">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.1" date="1778673602">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.2" date="1778673603">- net: skbuff: propagate shared-frag marker through pskb_copy()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-124.56.3" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.4" date="1778846400">- ptrace: slightly saner get_dumpable() logic (upstream 31e62c2ebbfd)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-124.56.5" date="1778846401">- ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe replacement
  for the upstream 31e62c2ebbfd which broke task_struct kABI)</changelog>
</package>
<package pkgid="957b5111e8377209d093b377aa07989bb25b83809a8869d4fa9098b297787028" name="rv" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.28.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374)
- RHEL changelog for 211.27.1..211.28.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.28.2" date="1782820800">- Add upstream ipv4/ipv6 fraggap paged-allocation fixes (1384-1385)
  eca856950f7c ipv4: account for fraggap on the paged allocation path
  736b380e28d0 ipv6: account for fraggap on the paged allocation path</changelog>
</package>
<package pkgid="804f95cf7db6817d5361762097d65b60bc5cf335d0abba0d0b123bed066f5ae7" name="rv" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.30.3.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.29.1" date="1782907200">- Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398)
- Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385)
- RHEL changelog for 211.29.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907201">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.1" date="1783080000">- Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414)
- RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6
  fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are
  retained and RHEL's duplicate copies omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 211.30.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.2" date="1783080001">- Fix KVM x86 shadow paging use-after-free due to unexpected GFN ahead of RHEL (1415)
- Fix KVM x86 shadow paging use-after-free due to unexpected role ahead of RHEL (1416)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.30.3" date="1783339200">- Fix CVE-2026-46242: eventpoll ep_remove struct eventpoll / struct file
  use-after-free, adapted from upstream a6dc643c6931 ahead of RHEL (1417)</changelog>
</package>
<package pkgid="15e2172b3d962d40e309efca19fa118ff56052791df1317b00ab747d83398847" name="rv" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.31.2.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.1" date="1783512000">- Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420)
- RHEL changelog for 211.31.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.31.2" date="1783512001">- Bring back the rtmutex self-deadlock NULL pointer dereference fixes in
  remove_waiter() ahead of RHEL, upstream 3bfdc63936dd + 40a25d59e85b (1445, 1446)</changelog>
</package>
<package pkgid="e67e4aa1d8e8e6376026398fb5903e92e73d964943feddf6ce601f74c6b5a086" name="rv" arch="s390x">
  <version epoch="0" ver="6.12.0" rel="211.7.4.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.4.1.el10_2]" date="1774008000">- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.5.1.el10_2]" date="1774353600">- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.6.1.el10_2]" date="1774612800">- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.7.1.el10_2]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673]
- platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053]
- platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053]
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415]
- bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [6.12.0-211.7.1.el10_2]" date="1776168000">- Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko)
- kabi: enable check-kabi (Čestmír Kalina)
- kabi: add symbols to stablelist (Čestmír Kalina)
- Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver)
- Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550400">- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec
- crypto: scatterwalk - Backport memcpy_sglist()
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
- crypto: algif_aead - Revert to operating out-of-place
- crypto: algif_aead - snapshot IV for async AEAD requests
- crypto: authenc - use memcpy_sglist() instead of null skcipher
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
- crypto: authencesn - Fix src offset when decrypting in-place
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Neal Gompa &lt;ngompa@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550401">- Enable Btrfs support for all kernel variants</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.12.0-211.7.1" date="1777550402">- Debrand for AlmaLinux OS
- Use AlmaLinux OS secure boot cert</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 6.12.0-211.7.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment() and
  tcp_clone_payload(); CVE-2026-46300 "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
</otherdata>