The following RPMs are included in this version:
| RPM | Issue |
|---|---|
|
|
|
| bpftool-4.18.0-553.126.1.el8_10.x86_64.rpm | - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] |
| - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] | |
| - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] | |
| - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} | |
| - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] | |
| - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] | |
| - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] | |
| - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} | |
| - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} | |
| - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} | |
| - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} | |
| - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} | |
| - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} | |
| - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] | |
| - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] | |
| - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} | |
| - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] | |
| - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] | |
| - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] | |
| - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] | |
| - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] | |
| - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] | |
| - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} | |
| - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} | |
| - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] | |
| - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] | |
| - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] | |
| - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} | |
| - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} | |
|
|
|
| cockpit-310.8-1.el8_10.x86_64.rpm | - ws: fix uninitialized read in tls-sniffing code |
| - ws: tighten up branding path construction | |
| - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) | |
| - Remove recommends on subscription-manager-cockpit if applicable | |
| - shell: Determine session idle time and countdown from clock time (RHEL-171011) | |
|
|
|
| cockpit-bridge-310.8-1.el8_10.x86_64.rpm | - ws: fix uninitialized read in tls-sniffing code |
| - ws: tighten up branding path construction | |
| - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) | |
| - Remove recommends on subscription-manager-cockpit if applicable | |
| - shell: Determine session idle time and countdown from clock time (RHEL-171011) | |
|
|
|
| cockpit-system-310.8-1.el8_10.noarch.rpm | - ws: fix uninitialized read in tls-sniffing code |
| - ws: tighten up branding path construction | |
| - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) | |
| - Remove recommends on subscription-manager-cockpit if applicable | |
| - shell: Determine session idle time and countdown from clock time (RHEL-171011) | |
|
|
|
| cockpit-ws-310.8-1.el8_10.x86_64.rpm | - ws: fix uninitialized read in tls-sniffing code |
| - ws: tighten up branding path construction | |
| - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) | |
| - Remove recommends on subscription-manager-cockpit if applicable | |
| - shell: Determine session idle time and countdown from clock time (RHEL-171011) | |
|
|
|
| compat-openssl10-1.0.2o-4.el8_10.2.x86_64.rpm | - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing |
| Resolves: RHEL-165754 | |
|
|
|
| expat-2.5.0-2.el8_10.x86_64.rpm | - Fix CVE-2026-45186 |
| - Resolves: RHEL-177979 | |
|
|
|
| firewalld-0.9.11-11.el8_10.noarch.rpm | - fix(policy): allow-host-ipv6: allow MLD packets |
|
|
|
| firewalld-filesystem-0.9.11-11.el8_10.noarch.rpm | - fix(policy): allow-host-ipv6: allow MLD packets |
|
|
|
| glibc-2.28-251.el8_10.37.x86_64.rpm | - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) |
| - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules | |
| (RHEL-162891) | |
| - Fix __nss_get_default_domain logic to restore netgroup user enumeration | |
| (RHEL-168095) | |
|
|
|
| glibc-all-langpacks-2.28-251.el8_10.37.x86_64.rpm | - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) |
| - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules | |
| (RHEL-162891) | |
| - Fix __nss_get_default_domain logic to restore netgroup user enumeration | |
| (RHEL-168095) | |
|
|
|
| glibc-common-2.28-251.el8_10.37.x86_64.rpm | - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) |
| - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules | |
| (RHEL-162891) | |
| - Fix __nss_get_default_domain logic to restore netgroup user enumeration | |
| (RHEL-168095) | |
|
|
|
| glibc-devel-2.28-251.el8_10.37.x86_64.rpm | - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) |
| - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules | |
| (RHEL-162891) | |
| - Fix __nss_get_default_domain logic to restore netgroup user enumeration | |
| (RHEL-168095) | |
|
|
|
| glibc-gconv-extra-2.28-251.el8_10.37.x86_64.rpm | - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) |
| - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules | |
| (RHEL-162891) | |
| - Fix __nss_get_default_domain logic to restore netgroup user enumeration | |
| (RHEL-168095) | |
|
|
|
| glibc-headers-2.28-251.el8_10.37.x86_64.rpm | - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) |
| - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules | |
| (RHEL-162891) | |
| - Fix __nss_get_default_domain logic to restore netgroup user enumeration | |
| (RHEL-168095) | |
|
|
|
| gnutls-3.6.16-8.el8_10.6.x86_64.rpm | - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) |
| - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) | |
| - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) | |
| - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) | |
| - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) | |
| - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) | |
| - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) | |
| - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) | |
| - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) | |
| - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) | |
| - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) | |
| - Fix upstream security issue #1808 (PSK rehandshake) | |
| - Fix upstream security issue #1810 (EKU OID prefix match) | |
| - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) | |
| - Fix upstream security issue #1819 (PKCS#11 trust removal error path) | |
| - Fix upstream security issue #1817 (session parameter loading robustness) | |
|
|
|
| iwl100-firmware-39.31.5.1-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl1000-firmware-39.31.5.1-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl105-firmware-18.168.6.1-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl135-firmware-18.168.6.1-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl2000-firmware-18.168.6.1-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl2030-firmware-18.168.6.1-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl3160-firmware-25.30.13.0-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl5000-firmware-8.83.5.1_1-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl5150-firmware-8.24.2.2-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl6000-firmware-9.221.4.1-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl6000g2a-firmware-18.168.6.1-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl6000g2b-firmware-18.168.6.1-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl6050-firmware-41.28.5.1-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| iwl7260-firmware-25.30.13.0-139.el8_10.1.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| kernel-4.18.0-553.126.1.el8_10.x86_64.rpm | - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] |
| - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] | |
| - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] | |
| - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} | |
| - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] | |
| - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] | |
| - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] | |
| - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} | |
| - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} | |
| - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} | |
| - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} | |
| - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} | |
| - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} | |
| - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] | |
| - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] | |
| - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} | |
| - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] | |
| - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] | |
| - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] | |
| - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] | |
| - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] | |
| - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] | |
| - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} | |
| - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} | |
| - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] | |
| - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] | |
| - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] | |
| - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} | |
| - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
|
|
|
| kernel-core-4.18.0-553.126.1.el8_10.x86_64.rpm | - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] |
| - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] | |
| - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] | |
| - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} | |
| - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] | |
| - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] | |
| - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] | |
| - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} | |
| - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} | |
| - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} | |
| - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} | |
| - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} | |
| - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} | |
| - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] | |
| - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] | |
| - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} | |
| - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] | |
| - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] | |
| - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] | |
| - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] | |
| - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] | |
| - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] | |
| - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} | |
| - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} | |
| - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] | |
| - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] | |
| - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] | |
| - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} | |
| - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
|
|
|
| kernel-headers-4.18.0-553.126.1.el8_10.x86_64.rpm | - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] |
| - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] | |
| - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] | |
| - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} | |
| - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] | |
| - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] | |
| - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] | |
| - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} | |
| - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} | |
| - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} | |
| - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} | |
| - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} | |
| - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} | |
| - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] | |
| - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] | |
| - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} | |
| - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] | |
| - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] | |
| - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] | |
| - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] | |
| - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] | |
| - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] | |
| - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} | |
| - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} | |
| - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] | |
| - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] | |
| - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] | |
| - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} | |
| - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} | |
|
|
|
| kernel-modules-4.18.0-553.126.1.el8_10.x86_64.rpm | - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] |
| - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] | |
| - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] | |
| - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} | |
| - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] | |
| - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] | |
| - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] | |
| - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} | |
| - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} | |
| - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} | |
| - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} | |
| - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} | |
| - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} | |
| - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] | |
| - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] | |
| - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} | |
| - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] | |
| - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] | |
| - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] | |
| - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] | |
| - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] | |
| - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] | |
| - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} | |
| - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} | |
| - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] | |
| - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] | |
| - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] | |
| - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} | |
| - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
|
|
|
| kernel-tools-4.18.0-553.126.1.el8_10.x86_64.rpm | - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] |
| - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] | |
| - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] | |
| - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} | |
| - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] | |
| - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] | |
| - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] | |
| - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} | |
| - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} | |
| - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} | |
| - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} | |
| - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} | |
| - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} | |
| - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] | |
| - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] | |
| - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} | |
| - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] | |
| - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] | |
| - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] | |
| - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] | |
| - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] | |
| - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] | |
| - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} | |
| - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} | |
| - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] | |
| - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] | |
| - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] | |
| - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} | |
| - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} | |
|
|
|
| kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64.rpm | - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] |
| - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] | |
| - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] | |
| - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} | |
| - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] | |
| - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] | |
| - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] | |
| - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} | |
| - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} | |
| - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} | |
| - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} | |
| - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} | |
| - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} | |
| - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] | |
| - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] | |
| - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} | |
| - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] | |
| - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] | |
| - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] | |
| - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] | |
| - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] | |
| - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] | |
| - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} | |
| - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} | |
| - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] | |
| - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] | |
| - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] | |
| - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} | |
| - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} | |
|
|
|
| libertas-usb8388-firmware-20260507-139.git027be1e3.el8_10.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| libexif-0.6.22-6.el8_10.x86_64.rpm | - Fix CVE-2020-0452 |
| - Resolves: #1902593 | |
| - Fix integer underflow in MakerNote decoding (CVE-2026-40386) | |
| - Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385) | |
| Resolves: RHEL-170243, RHEL-170220 | |
|
|
|
| libsndfile-1.0.28-17.el8_10.x86_64.rpm | - apply patch for CVE-2026-37555 |
| Resolves: RHEL-174533 | |
|
|
|
| linux-firmware-20260507-139.git027be1e3.el8_10.noarch.rpm | - Update linux-firmware to latest upstream (RHEL-172252) |
| Changes since the last update are noted on items below, copied from | |
| the git changelog of upstream linux-firmware repository. | |
| - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU | |
| - amdgpu: DMCUB updates for various ASICs | |
| - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. | |
| - qcom: update ADSP firmware for x1e80100 platform | |
| - linux-firmware:Add firmware for Lontium LT7911EXC bridge | |
| - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too | |
| - qcom: Update CDSP firmware for Kaanapali platform | |
| - qcom: vpu: add Gen2 firmware binary for Agatti | |
| - amdgpu: DMCUB updates for various ASICs | |
| - linux-firmware: Add firmware file for Intel BlazarIW | |
| - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core | |
| - linux-firmware: Add firmware file for Intel BlazarIGfp2 core | |
| - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core | |
| - linux-firmware: Update firmware file for Intel BlazarU core | |
| - linux-firmware: Update firmware file for Intel Scorpius core | |
| - linux-firmware: Update firmware file for Intel BlazarI core | |
| - qcom: Update ADSP firmware for Glymur platform | |
| - mediatek MT7925: update bluetooth firmware to 20260414153243 | |
| - linux-firmware: update firmware for MT7925 WiFi device | |
| - Revert "linux-firmware: Update firmware file for Intel Quasar core" | |
| - qcom: Add gpdspr.jsn for qcs8300 platform | |
| - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 | |
| - ath12k: QCC2072 hw1.0: add board-2.bin | |
| - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 | |
| - ath12k: IPQ5424 hw1.0: add board-2.bin | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops | |
| - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) | |
| - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 | |
| - amdgpu: DMCUB updates for DCN36 | |
| - linux-firmware: Update AMD cpu microcode | |
| - powervr: update Imagination Rogue firmware images | |
| - qcom: Update ADSP firmware for Kaanapali platform | |
| - i915: Xe3LPD DMC v2.34 | |
| - i915: Xe3LPD_3002 DMC v2.29 | |
| - qcom: Update ADSP firmware for QCM6490 platform | |
| - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 | |
| - mediatek: vpu: drop old sym link | |
| Resolves: RHEL-172252 | |
|
|
|
| nscd-2.28-251.el8_10.37.x86_64.rpm | - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) |
| - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules | |
| (RHEL-162891) | |
| - Fix __nss_get_default_domain logic to restore netgroup user enumeration | |
| (RHEL-168095) | |
|
|
|
| nss_hesiod-2.28-251.el8_10.37.x86_64.rpm | - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) |
| - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules | |
| (RHEL-162891) | |
| - Fix __nss_get_default_domain logic to restore netgroup user enumeration | |
| (RHEL-168095) | |
|
|
|
| python3-firewall-0.9.11-11.el8_10.noarch.rpm | - fix(policy): allow-host-ipv6: allow MLD packets |
|
|
|
| python3-perf-4.18.0-553.126.1.el8_10.x86_64.rpm | - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] |
| - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] | |
| - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] | |
| - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] | |
| - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] | |
| - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] | |
| - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} | |
| - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] | |
| - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] | |
| - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] | |
| - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} | |
| - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} | |
| - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} | |
| - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} | |
| - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} | |
| - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} | |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} | |
| - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} | |
| - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] | |
| - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] | |
| - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] | |
| - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} | |
| - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] | |
| - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] | |
| - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] | |
| - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] | |
| - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] | |
| - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] | |
| - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] | |
| - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} | |
| - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} | |
| - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] | |
| - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] | |
| - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] | |
| - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] | |
| - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] | |
| - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] | |
| - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} | |
| - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} | |
| - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - Adding prod certs and changed cert date to 20210620 (Sherif Nagy) | |
| - Adding Rocky secure boot certs (Sherif Nagy) | |
| - Fixing vmlinuz removal (Sherif Nagy) | |
| - Fixing UEFI CA path (Sherif Nagy) | |
| - Porting to 8.10, debranding and Rocky branding (Louis Abel) | |
| - Fixing pesign_key_name values (Sherif Nagy) | |
| - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} | |
| - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} | |
|
|
|
| python3-unbound-1.16.2-5.10.el8_10.x86_64.rpm | - Add new root key 38696 (RHEL-131172) |
| - Update unbound-anchor built-in dnssec key | |
|
|
|
| rocky-gpg-keys-8.10-1.14.el8.noarch.rpm | - Fix GPG key file location in new fast track security repo |
|
|
|
| rocky-release-8.10-1.14.el8.noarch.rpm | - Fix GPG key file location in new fast track security repo |
|
|
|
| rocky-repos-8.10-1.14.el8.noarch.rpm | - Fix GPG key file location in new fast track security repo |
|
|
|
| rsync-3.1.3-25.el8_10.x86_64.rpm | - Resolves: RHEL-169141 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling |
|
|
|
| tzdata-2026b-1.el8_10.noarch.rpm | - Update to tzdata-2026b (RHEL-170797) |
| - British Columbia’s 2026-03-08 spring forward is expected | |
| to be its last transition as it moves to permanent -07. | |
|
|
|
| unbound-libs-1.16.2-5.10.el8_10.x86_64.rpm | - Add new root key 38696 (RHEL-131172) |
| - Update unbound-anchor built-in dnssec key | |
|
|
|
| vim-common-8.0.1763-23.el8_10.x86_64.rpm | - RHEL-170126 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite |
| via path traversal bypass | |
|
|
|
| vim-enhanced-8.0.1763-23.el8_10.x86_64.rpm | - RHEL-170126 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite |
| via path traversal bypass | |
|
|
|
| vim-filesystem-8.0.1763-23.el8_10.noarch.rpm | - RHEL-170126 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite |
| via path traversal bypass | |
|
|
|
| vim-minimal-8.0.1763-23.el8_10.x86_64.rpm | - RHEL-170126 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite |
| via path traversal bypass | |
|
|
|
×