Rocky Linux 10 s390x CRB

freerdp-server-2:3.10.3-12.el10_2.8.s390x

Thu, 13 Aug 2026 09:07:55 AM GMT

freerdp-server - Server support for freerdp

The freerdp-server package contains servers which can export a desktop via
the RDP protocol.

Change Log:

Tue, 04 Aug 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2:3.10.3-12.8
- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604

Sat, 11 Jul 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2:3.10.3-12.7
- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327

Mon, 29 Jun 2026 GMT - Ondrej Holy <oholy@redhat.com> - 2:3.10.3-12.6
- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093

...

freerdp-devel-2:3.10.3-12.el10_2.8.s390x

Thu, 13 Aug 2026 09:07:55 AM GMT

freerdp-devel - Development files for freerdp

The freerdp-devel package contains libraries and header files for developing
applications that use freerdp-libs.

Change Log:

Tue, 04 Aug 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2:3.10.3-12.8
- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604

Sat, 11 Jul 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2:3.10.3-12.7
- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327

Mon, 29 Jun 2026 GMT - Ondrej Holy <oholy@redhat.com> - 2:3.10.3-12.6
- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093

...

libwinpr-devel-2:3.10.3-12.el10_2.8.s390x

Thu, 13 Aug 2026 09:07:55 AM GMT

libwinpr-devel - Windows Portable Runtime development files

The freerdp-libwinpr-devel package contains libraries and header files for
developing applications that use freerdp-libwinpr.

Change Log:

Tue, 04 Aug 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2:3.10.3-12.8
- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604

Sat, 11 Jul 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2:3.10.3-12.7
- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327

Mon, 29 Jun 2026 GMT - Ondrej Holy <oholy@redhat.com> - 2:3.10.3-12.6
- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093

...

libperf-6.12.0-211.47.1.el10_2.s390x

Wed, 12 Aug 2026 10:13:13 PM GMT

libperf - The perf library from kernel source

This package contains the kernel source perf library.

Change Log:

Wed, 12 Aug 2026 GMT - Release Engineering <releng@rockylinux.org> - 6.12.0-211.47.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Wed, 12 Aug 2026 GMT - CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.47.1.el10_2]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}

Mon, 10 Aug 2026 GMT - CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.46.1.el10_2]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}

...

kernel-cross-headers-6.12.0-211.47.1.el10_2.s390x

Wed, 12 Aug 2026 10:13:13 PM GMT

kernel-cross-headers - Header files for the Linux kernel for use by cross-glibc

Kernel-cross-headers includes the C header files that specify the interface
between the Linux kernel and userspace libraries and programs. The
header files define structures and constants that are needed for
building most standard programs and are also needed for rebuilding the
cross-glibc package.

Change Log:

Wed, 12 Aug 2026 GMT - Release Engineering <releng@rockylinux.org> - 6.12.0-211.47.1
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support

Wed, 12 Aug 2026 GMT - CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.47.1.el10_2]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}

Mon, 10 Aug 2026 GMT - CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-211.46.1.el10_2]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}

...

libudisks2-devel-2.11.0-2.el10_2.1.s390x

Tue, 11 Aug 2026 08:17:19 PM GMT

libudisks2-devel - Development files for libudisks2

This package contains the development files for the library libudisks2,
a dynamic library, which provides access to the udisksd daemon.

Change Log:

Fri, 19 Jun 2026 GMT - Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-2.1
- Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437)

Fri, 27 Feb 2026 GMT - Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-2
- Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566)
- Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590)

Thu, 06 Nov 2025 GMT - Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
- Version 2.11.0 (RHEL-114981)
- tests: Rework nvme revision check (RHEL-90572)
- tests: Adapt for missing fstab and crypttab (RHEL-78987)

...

selinux-policy-targeted-extra-42.1.18-4.el10_2.3.noarch

Tue, 11 Aug 2026 07:09:19 PM GMT

selinux-policy-targeted-extra - SELinux targeted policy - extra modules

SELinux targeted policy package - extra modules

Change Log:

Thu, 06 Aug 2026 GMT - Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.3
- Allow virtqemud_t get priority of a svirt_t process
Resolves: RHEL-224484

Tue, 23 Jun 2026 GMT - Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.2
- Remove permissive domain for sshd_session_t and sshd_auth_t
Resolves: RHEL-178897

Thu, 21 May 2026 GMT - Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.1
- Replace "\_" (backslash underscore) with "_" (just underscore)
Resolves: RHEL-171367

...

selinux-policy-mls-extra-42.1.18-4.el10_2.3.noarch

Tue, 11 Aug 2026 07:09:19 PM GMT

selinux-policy-mls-extra - SELinux mls policy - extra modules

SELinux mls policy package - extra modules

Change Log:

Thu, 06 Aug 2026 GMT - Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.3
- Allow virtqemud_t get priority of a svirt_t process
Resolves: RHEL-224484

Tue, 23 Jun 2026 GMT - Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.2
- Remove permissive domain for sshd_session_t and sshd_auth_t
Resolves: RHEL-178897

Thu, 21 May 2026 GMT - Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.1
- Replace "\_" (backslash underscore) with "_" (just underscore)
Resolves: RHEL-171367

...

selinux-policy-extra-42.1.18-4.el10_2.3.noarch

Tue, 11 Aug 2026 07:09:19 PM GMT

selinux-policy-extra - SELinux policy - extra modules

SELinux policy - extra modules

Change Log:

Thu, 06 Aug 2026 GMT - Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.3
- Allow virtqemud_t get priority of a svirt_t process
Resolves: RHEL-224484

Tue, 23 Jun 2026 GMT - Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.2
- Remove permissive domain for sshd_session_t and sshd_auth_t
Resolves: RHEL-178897

Thu, 21 May 2026 GMT - Zdenek Pytela <zpytela@redhat.com> - 42.1.18-4.1
- Replace "\_" (backslash underscore) with "_" (just underscore)
Resolves: RHEL-171367

...

ruby4.0-doc-4.0.6-36.el10_2.noarch

Thu, 06 Aug 2026 09:06:47 AM GMT

ruby4.0-doc - Documentation for ruby4.0

This package contains documentation for ruby4.0.

Change Log:

Wed, 22 Jul 2026 GMT - Jarek Prokop <jprokop@redhat.com> - 4.0.6-36
- Upgrade to Ruby 4.0.6.
  Resolves: RHEL-211310
  Resolves: RHEL-193660

Wed, 10 Jun 2026 GMT - Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-35
- Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245)
  Includes core fix plus additional performance optimizations 
  Resolves: RHEL-181675
- Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246)
  Resolves: RHEL-181767
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258)
  Resolves: RHEL-181793

Wed, 29 Apr 2026 GMT - Tomas Juhasz <tjuhasz@redhat.com> - 4.0.3-34
- Upgrade to Ruby 4.0.3.
  Resolves: RHEL-171239
- Fix ERB: Arbitrary code execution via bypass
 (CVE-2026-41316)
  Resolves: RHEL-170910
- Fix JSON: Denial of Service or Information Disclosure via format string injection
 (CVE-2026-33210)
 Resolves: RHEL-173457

...

ruby-doc-3.3.12-14.el10_2.noarch

Wed, 05 Aug 2026 08:15:32 PM GMT

ruby-doc - Documentation for ruby

This package contains documentation for ruby.

Change Log:

Thu, 23 Jul 2026 GMT - Jarek Prokop <jprokop@redhat.com> - 3.3.12-14
- Upgrade to Ruby 3.3.12.
  Resolves: RHEL-211300
  Resolves: RHEL-193659

Thu, 11 Jun 2026 GMT - Jarek Prokop <jprokop@redhat.com> - 3.3.10-13
- Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245)
  Resolves: RHEL-181687
- Fix information disclosure via MITM attack bypassing TLS in net-imap.
  (CVE-2026-42246)
  Resolves: RHEL-181775
- Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258)
  Resolves: RHEL-181797

Tue, 28 Apr 2026 GMT - Jarek Prokop <jprokop@redhat.com> - 3.3.10-12
- Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
  Resolves: RHEL-171245

...

libguestfs-devel-1:1.58.1-8.el10_2.s390x

Tue, 04 Aug 2026 09:43:36 PM GMT

libguestfs-devel - Development tools and libraries for libguestfs

libguestfs-devel contains development tools and libraries
for libguestfs.

Change Log:

Fri, 10 Jul 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-8
- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946

Mon, 11 May 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-6
- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch

Fri, 17 Apr 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-5
- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225

...

ocaml-libguestfs-devel-1:1.58.1-8.el10_2.s390x

Tue, 04 Aug 2026 09:43:36 PM GMT

ocaml-libguestfs-devel - OCaml bindings for libguestfs

ocaml-libguestfs-devel contains development libraries
required to use the OCaml bindings for libguestfs.

Change Log:

Fri, 10 Jul 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-8
- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946

Mon, 11 May 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-6
- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch

Fri, 17 Apr 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-5
- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225

...

ocaml-libguestfs-1:1.58.1-8.el10_2.s390x

Tue, 04 Aug 2026 09:43:36 PM GMT

ocaml-libguestfs - OCaml bindings for libguestfs

ocaml-libguestfs contains OCaml bindings for libguestfs.

This is for toplevel and scripting access only. To compile OCaml
programs which use libguestfs you will also need ocaml-libguestfs-devel.

Change Log:

Fri, 10 Jul 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-8
- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946

Mon, 11 May 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-6
- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch

Fri, 17 Apr 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-5
- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225

...

sg3_utils-devel-1.48-7.el10_2.1.s390x

Tue, 04 Aug 2026 09:42:46 PM GMT

sg3_utils-devel - Development library and header files for the sg3_utils library

This package contains the sg3_utils library and its header files for
developing applications.

Change Log:

Thu, 25 Jun 2026 GMT - Paul Evans <pevans@redhat.com> - 1.48-7.1
- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188123)

Mon, 04 Nov 2024 GMT - Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
- udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
- Install missing 00-scsi-sg3_config.rules
- Fix file references to other udev rules

Tue, 29 Oct 2024 GMT - Troy Dawson <tdawson@redhat.com> - 1.48-6
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

gdm-pam-extensions-devel-1:47.0-22.el10_2.s390x

Tue, 04 Aug 2026 09:41:55 PM GMT

gdm-pam-extensions-devel - Macros for developing GDM extensions to PAM

The gdm-pam-extensions-devel package contains headers and other
files that are helpful to PAM modules wishing to support
GDM specific authentication features.

Change Log:

Fri, 10 Jul 2026 GMT - Joan Torres Lopez <joantolo@redhat.com> - 1:47.0-22
- Fix auth bypass in authselect pam substacks

Thu, 28 May 2026 GMT - Tomas Pelka <tpelka@redhat.com> - 1:47.0-21
- Resolves: https://redhat.atlassian.net/browse/RHEL-178665

Wed, 27 May 2026 GMT - Joan Torres Lopez <joantolo@redhat.com> - 1:47.0-20
- Update how GDM handles Registering session/display to properly

...

gdm-devel-1:47.0-22.el10_2.s390x

Tue, 04 Aug 2026 09:41:55 PM GMT

gdm-devel - Development files for gdm

The gdm-devel package contains headers and other
files needed to build custom greeters.

Change Log:

Fri, 10 Jul 2026 GMT - Joan Torres Lopez <joantolo@redhat.com> - 1:47.0-22
- Fix auth bypass in authselect pam substacks

Thu, 28 May 2026 GMT - Tomas Pelka <tpelka@redhat.com> - 1:47.0-21
- Resolves: https://redhat.atlassian.net/browse/RHEL-178665

Wed, 27 May 2026 GMT - Joan Torres Lopez <joantolo@redhat.com> - 1:47.0-20
- Update how GDM handles Registering session/display to properly

...

NetworkManager-libnm-devel-1:1.56.0-2.el10_2.s390x

Tue, 04 Aug 2026 09:32:33 PM GMT

NetworkManager-libnm-devel - Header files for adding NetworkManager support to applications.

This package contains the header and pkg-config files for development
applications using NetworkManager functionality from applications.

Change Log:

Thu, 16 Jul 2026 GMT - Rahul Rajesh <rrajesh@redhat.com> - 1:1.56.0-2
- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)

Fri, 13 Feb 2026 GMT - Vladimír Beneš <vbenes@redhat.com> - 1:1.56.0-1
- Update to 1.56.0

Mon, 15 Dec 2025 GMT - Íñigo Huguet <ihuguet@redhat.com> - 1:1.55.91-1
- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)

...

libguestfs-man-pages-uk-1:1.58.1-8.el10_2.noarch

Tue, 04 Aug 2026 09:32:14 PM GMT

libguestfs-man-pages-uk - Ukrainian (uk) man pages for libguestfs

libguestfs-man-pages-uk contains Ukrainian (uk) man pages
for libguestfs.

Change Log:

Fri, 10 Jul 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-8
- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946

Mon, 11 May 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-6
- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch

Fri, 17 Apr 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-5
- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225

...

libguestfs-man-pages-ja-1:1.58.1-8.el10_2.noarch

Tue, 04 Aug 2026 09:32:14 PM GMT

libguestfs-man-pages-ja - Japanese (ja) man pages for libguestfs

libguestfs-man-pages-ja contains Japanese (ja) man pages
for libguestfs.

Change Log:

Fri, 10 Jul 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-8
- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946

Mon, 11 May 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-6
- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch

Fri, 17 Apr 2026 GMT - Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-5
- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225

...

python3-ldns-1.8.3-18.el10_2.1.s390x

Tue, 04 Aug 2026 10:34:52 AM GMT

python3-ldns - Python3 extensions for ldns

Python3 extensions for ldns

Change Log:

Fri, 17 Jul 2026 GMT - Fedor Vorobev <fvorobev@redhat.com> - 1.8.3-18.1
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210690)

Tue, 29 Oct 2024 GMT - Jitka Plesnikova <jplesnik@redhat.com> - 1.8.3-18
- Fix for SWIG 4.3.0

Tue, 29 Oct 2024 GMT - Troy Dawson <tdawson@redhat.com> - 1.8.3-17
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...

perl-ldns-1.8.3-18.el10_2.1.s390x

Tue, 04 Aug 2026 10:34:52 AM GMT

perl-ldns - Perl extensions for ldns

Perl extensions for ldns

Change Log:

Fri, 17 Jul 2026 GMT - Fedor Vorobev <fvorobev@redhat.com> - 1.8.3-18.1
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210690)

Tue, 29 Oct 2024 GMT - Jitka Plesnikova <jplesnik@redhat.com> - 1.8.3-18
- Fix for SWIG 4.3.0

Tue, 29 Oct 2024 GMT - Troy Dawson <tdawson@redhat.com> - 1.8.3-17
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...

ldns-utils-1.8.3-18.el10_2.1.s390x

Tue, 04 Aug 2026 10:34:52 AM GMT

ldns-utils - DNS(SEC) utilities for querying dns

Collection of tools to get, check or alter DNS(SEC) data.

Change Log:

Fri, 17 Jul 2026 GMT - Fedor Vorobev <fvorobev@redhat.com> - 1.8.3-18.1
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210690)

Tue, 29 Oct 2024 GMT - Jitka Plesnikova <jplesnik@redhat.com> - 1.8.3-18
- Fix for SWIG 4.3.0

Tue, 29 Oct 2024 GMT - Troy Dawson <tdawson@redhat.com> - 1.8.3-17
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...

ldns-devel-1.8.3-18.el10_2.1.s390x

Tue, 04 Aug 2026 10:34:52 AM GMT

ldns-devel - Development package that includes the ldns header files

The devel package contains the ldns library and the include files

Change Log:

Fri, 17 Jul 2026 GMT - Fedor Vorobev <fvorobev@redhat.com> - 1.8.3-18.1
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210690)

Tue, 29 Oct 2024 GMT - Jitka Plesnikova <jplesnik@redhat.com> - 1.8.3-18
- Fix for SWIG 4.3.0

Tue, 29 Oct 2024 GMT - Troy Dawson <tdawson@redhat.com> - 1.8.3-17
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...

ldns-doc-1.8.3-18.el10_2.1.noarch

Tue, 04 Aug 2026 10:33:48 AM GMT

ldns-doc - Documentation for the ldns library

This package contains documentation for the ldns library

Change Log:

Fri, 17 Jul 2026 GMT - Fedor Vorobev <fvorobev@redhat.com> - 1.8.3-18.1
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210690)

Tue, 29 Oct 2024 GMT - Jitka Plesnikova <jplesnik@redhat.com> - 1.8.3-18
- Fix for SWIG 4.3.0

Tue, 29 Oct 2024 GMT - Troy Dawson <tdawson@redhat.com> - 1.8.3-17
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...

gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.6.s390x

Wed, 29 Jul 2026 05:42:24 AM GMT

gstreamer1-plugins-bad-free-devel - Development files for the GStreamer media framework "bad" plug-ins

GStreamer is a streaming media framework, based on graphs of elements which
operate on media data.

This package contains the development files for the plug-ins that
aren't tested well enough, or the code is not of good enough quality.

Change Log:

Sat, 11 Jul 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.26.7-2.5
- Fix rfbsrc hextile and color read handling for non-32bpp
  pixel formats (CVE-2026-59691)
  Resolves: RHEL-193550

Tue, 23 Jun 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.26.7-2.4
- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
  Resolves: RHEL-184391

Mon, 22 Jun 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.26.7-2.3
- Fix for CVE-2026-52719
  Resolves: RHEL-184406

...

rest-devel-0.9.1-11.el10_2.1.s390x

Wed, 29 Jul 2026 05:42:16 AM GMT

rest-devel - Development package for rest

Files for development with rest.

Change Log:

Mon, 27 Jul 2026 GMT - Milan Crha <mcrha@redhat.com> - 0.9.1-11.1
- Add patch for CVE-2026-16615 (Weak random number generation in PKCE implementation)
  Resolves: RHEL-213749

Tue, 29 Oct 2024 GMT - Troy Dawson <tdawson@redhat.com> - 0.9.1-11
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

libXfont2-devel-2.0.6-5.el10_2.1.s390x

Wed, 29 Jul 2026 05:40:30 AM GMT

libXfont2-devel - X.Org X11 libXfont2 development package

X.Org X11 libXfont development package

Change Log:

Wed, 08 Jul 2026 GMT - Olivier Fourdan <ofourdan@redhat.com> - 2.0.6-5.1
- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191882
  Resolves: https://redhat.atlassian.net/browse/RHEL-191930
  Resolves: https://redhat.atlassian.net/browse/RHEL-191949

Tue, 29 Oct 2024 GMT - Troy Dawson <tdawson@redhat.com> - 2.0.6-5
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

java-21-openjdk-static-libs-slowdebug-1:21.0.12.0.8-1.2.el10_2.s390x

Sat, 25 Jul 2026 10:09:21 PM GMT

java-21-openjdk-static-libs-slowdebug - OpenJDK 21 libraries for static linking unoptimised with full debugging on

The OpenJDK 21 libraries for static linking.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Build for Rocky Linux 10 using our own portable

Sat, 18 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

...

java-21-openjdk-src-slowdebug-1:21.0.12.0.8-1.2.el10_2.s390x

Sat, 25 Jul 2026 10:09:21 PM GMT

java-21-openjdk-src-slowdebug - OpenJDK 21 Source Bundle for packages with debugging on and no optimisation

The java-21-openjdk-src-slowdebug sub-package contains the complete OpenJDK 21
class library source code for use by IDE indexers and debuggers, for packages with debugging on and no optimisation.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Build for Rocky Linux 10 using our own portable

Sat, 18 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

...

java-21-openjdk-slowdebug-1:21.0.12.0.8-1.2.el10_2.s390x

Sat, 25 Jul 2026 10:09:21 PM GMT

java-21-openjdk-slowdebug - OpenJDK 21 Runtime Environment unoptimised with full debugging on

The OpenJDK 21 runtime environment.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Build for Rocky Linux 10 using our own portable

Sat, 18 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

...

java-21-openjdk-jmods-slowdebug-1:21.0.12.0.8-1.2.el10_2.s390x

Sat, 25 Jul 2026 10:09:21 PM GMT

java-21-openjdk-jmods-slowdebug - JMods for OpenJDK 21 unoptimised with full debugging on

The JMods for OpenJDK 21.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Build for Rocky Linux 10 using our own portable

Sat, 18 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

...

java-21-openjdk-headless-slowdebug-1:21.0.12.0.8-1.2.el10_2.s390x

Sat, 25 Jul 2026 10:09:21 PM GMT

java-21-openjdk-headless-slowdebug - OpenJDK 21 Runtime Environment unoptimised with full debugging on

The OpenJDK 21 runtime environment without audio and video support.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Build for Rocky Linux 10 using our own portable

Sat, 18 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

...

java-21-openjdk-devel-slowdebug-1:21.0.12.0.8-1.2.el10_2.s390x

Sat, 25 Jul 2026 10:09:21 PM GMT

java-21-openjdk-devel-slowdebug - OpenJDK 21 Development Environment unoptimised with full debugging on

The OpenJDK 21 development tools.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Build for Rocky Linux 10 using our own portable

Sat, 18 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

...

java-21-openjdk-demo-slowdebug-1:21.0.12.0.8-1.2.el10_2.s390x

Sat, 25 Jul 2026 10:09:21 PM GMT

java-21-openjdk-demo-slowdebug - OpenJDK 21 Demos unoptimised with full debugging on

The OpenJDK 21 demos.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.2
- Build for Rocky Linux 10 using our own portable

Sat, 18 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.2
- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162

...

java-25-openjdk-static-libs-slowdebug-1:25.0.4.0.7-1.1.el10_2.s390x

Sat, 25 Jul 2026 09:27:25 PM GMT

java-25-openjdk-static-libs-slowdebug - OpenJDK 25 libraries for static linking unoptimised with full debugging on

The OpenJDK 25 libraries for static linking.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Build for Rocky Linux 10 using our own portable

Thu, 16 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.0
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

...

java-25-openjdk-src-slowdebug-1:25.0.4.0.7-1.1.el10_2.s390x

Sat, 25 Jul 2026 09:27:25 PM GMT

java-25-openjdk-src-slowdebug - OpenJDK 25 Source Bundle for packages with debugging on and no optimisation

The java-25-openjdk-src-slowdebug sub-package contains the complete OpenJDK 25
class library source code for use by IDE indexers and debuggers, for packages with debugging on and no optimisation.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Build for Rocky Linux 10 using our own portable

Thu, 16 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.0
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

...

java-25-openjdk-slowdebug-1:25.0.4.0.7-1.1.el10_2.s390x

Sat, 25 Jul 2026 09:27:25 PM GMT

java-25-openjdk-slowdebug - OpenJDK 25 Runtime Environment unoptimised with full debugging on

The OpenJDK 25 runtime environment.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Build for Rocky Linux 10 using our own portable

Thu, 16 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.0
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

...

java-25-openjdk-jmods-slowdebug-1:25.0.4.0.7-1.1.el10_2.s390x

Sat, 25 Jul 2026 09:27:25 PM GMT

java-25-openjdk-jmods-slowdebug - JMods for OpenJDK 25 unoptimised with full debugging on

The JMods for OpenJDK 25.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Build for Rocky Linux 10 using our own portable

Thu, 16 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.0
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

...

java-25-openjdk-headless-slowdebug-1:25.0.4.0.7-1.1.el10_2.s390x

Sat, 25 Jul 2026 09:27:25 PM GMT

java-25-openjdk-headless-slowdebug - OpenJDK 25 Runtime Environment unoptimised with full debugging on

The OpenJDK 25 runtime environment without audio and video support.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Build for Rocky Linux 10 using our own portable

Thu, 16 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.0
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

...

java-25-openjdk-devel-slowdebug-1:25.0.4.0.7-1.1.el10_2.s390x

Sat, 25 Jul 2026 09:27:25 PM GMT

java-25-openjdk-devel-slowdebug - OpenJDK 25 Development Environment unoptimised with full debugging on

The OpenJDK 25 development tools.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Build for Rocky Linux 10 using our own portable

Thu, 16 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.0
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

...

java-25-openjdk-demo-slowdebug-1:25.0.4.0.7-1.1.el10_2.s390x

Sat, 25 Jul 2026 09:27:25 PM GMT

java-25-openjdk-demo-slowdebug - OpenJDK 25 Demos unoptimised with full debugging on

The OpenJDK 25 demos.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Build for Rocky Linux 10 using our own portable

Thu, 16 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.0
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

...

java-25-openjdk-crypto-adapter-slowdebug-1:25.0.4.0.7-1.1.el10_2.s390x

Sat, 25 Jul 2026 09:27:25 PM GMT

java-25-openjdk-crypto-adapter-slowdebug - OpenJDK 25 Cryptography Adapter Library unoptimised with full debugging on

The OpenJDK 25 cryptography adapter library.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Add riscv64 to debug_arches

Sat, 25 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.1
- Build for Rocky Linux 10 using our own portable

Thu, 16 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.0
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

...

java-25-openjdk-portable-static-libs-slowdebug-1:25.0.4.0.7-1.0.el10.s390x

Fri, 24 Jul 2026 05:45:21 PM GMT

java-25-openjdk-portable-static-libs-slowdebug - OpenJDK 25 libraries for static linking - portable edition unoptimised with full debugging on

The OpenJDK 25 libraries for static linking - portable edition
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Fri, 24 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.0.el9
- Build for Rocky Linux 10
- Ensure security properties are using old one

Thu, 16 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.0
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902

Mon, 13 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.3.0.9-3.0
- Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885

...

java-25-openjdk-portable-slowdebug-1:25.0.4.0.7-1.0.el10.s390x

Fri, 24 Jul 2026 05:45:21 PM GMT

java-25-openjdk-portable-slowdebug - OpenJDK 25 Runtime Environment portable edition unoptimised with full debugging on

The OpenJDK 25 runtime environment - portable edition.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Fri, 24 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.0.el9
- Build for Rocky Linux 10
- Ensure security properties are using old one

Thu, 16 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.0
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902

Mon, 13 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.3.0.9-3.0
- Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885

...

java-25-openjdk-portable-devel-slowdebug-1:25.0.4.0.7-1.0.el10.s390x

Fri, 24 Jul 2026 05:45:21 PM GMT

java-25-openjdk-portable-devel-slowdebug - OpenJDK 25 Runtime and Development Environment portable edition unoptimised with full debugging on

The OpenJDK 25 development tools - portable edition.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Fri, 24 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:25.0.4.0.7-1.0.el9
- Build for Rocky Linux 10
- Ensure security properties are using old one

Thu, 16 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.4.0.7-1.0
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902

Mon, 13 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.3.0.9-3.0
- Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885

...

java-21-openjdk-portable-static-libs-slowdebug-1:21.0.12.0.8-1.0.el10.s390x

Fri, 24 Jul 2026 05:27:24 PM GMT

java-21-openjdk-portable-static-libs-slowdebug - OpenJDK 21 libraries for static linking - portable edition unoptimised with full debugging on

The OpenJDK 21 libraries for static linking - portable edition
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Fri, 24 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.0.el9
- Build for Rocky Linux 10

Wed, 15 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.0
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865

Wed, 15 Jul 2026 GMT - Andrea Bolognani <abologna@redhat.com> - 1:21.0.11.0.10-2.0
- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891

...

java-21-openjdk-portable-slowdebug-1:21.0.12.0.8-1.0.el10.s390x

Fri, 24 Jul 2026 05:27:24 PM GMT

java-21-openjdk-portable-slowdebug - OpenJDK 21 Runtime Environment portable edition unoptimised with full debugging on

The OpenJDK 21 runtime environment - portable edition.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Fri, 24 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.0.el9
- Build for Rocky Linux 10

Wed, 15 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.0
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865

Wed, 15 Jul 2026 GMT - Andrea Bolognani <abologna@redhat.com> - 1:21.0.11.0.10-2.0
- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891

...

java-21-openjdk-portable-devel-slowdebug-1:21.0.12.0.8-1.0.el10.s390x

Fri, 24 Jul 2026 05:27:24 PM GMT

java-21-openjdk-portable-devel-slowdebug - OpenJDK 21 Runtime and Development Environment portable edition unoptimised with full debugging on

The OpenJDK 21 development tools - portable edition.
This package is unoptimised with full debugging. Install only as needed and remove ASAP.

Change Log:

Fri, 24 Jul 2026 GMT - Release Engineering <releng@rockylinux.org> - 1:21.0.12.0.8-1.0.el9
- Build for Rocky Linux 10

Wed, 15 Jul 2026 GMT - Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.12.0.8-1.0
- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865

Wed, 15 Jul 2026 GMT - Andrea Bolognani <abologna@redhat.com> - 1:21.0.11.0.10-2.0
- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891

...

mariadb-connector-c-test-3.4.4-2.el10_2.s390x

Wed, 22 Jul 2026 04:10:58 PM GMT

mariadb-connector-c-test - Testsuite files for mariadb-connector-c

Testsuite files for mariadb-connector-c.
Contains binaries and a prepared CMake ctest file.
Requires running MariaDB / MySQL server with create database "test".

Change Log:

Tue, 30 Jun 2026 GMT - Pavol Sloboda <psloboda@redhat.com> - 3.4.4-2
- CVE-2026-44172 fix

Wed, 12 Feb 2025 GMT - Michal Schorm <mschorm@redhat.com> - 3.4.4-1
- Rebase to 3.4.4

Tue, 04 Feb 2025 GMT - Michal Schorm <mschorm@redhat.com> - 3.4.3-10
- Disable option that requires all connections to be SSL encrypted by default

...

mariadb-connector-c-doc-3.4.4-2.el10_2.noarch

Wed, 22 Jul 2026 04:08:47 PM GMT

mariadb-connector-c-doc - Manual pages documenting API of the libmariadb.so library

Manual pages documenting API of the libmariadb.so library.

Change Log:

Tue, 30 Jun 2026 GMT - Pavol Sloboda <psloboda@redhat.com> - 3.4.4-2
- CVE-2026-44172 fix

Wed, 12 Feb 2025 GMT - Michal Schorm <mschorm@redhat.com> - 3.4.4-1
- Rebase to 3.4.4

Tue, 04 Feb 2025 GMT - Michal Schorm <mschorm@redhat.com> - 3.4.3-10
- Disable option that requires all connections to be SSL encrypted by default

...

nss_hesiod-2.39-128.el10_2.s390x

Tue, 21 Jul 2026 01:51:13 PM GMT

nss_hesiod - Name Service Switch (NSS) module using Hesiod

The nss_hesiod Name Service Switch module uses the Domain Name System
(DNS) as a source for user, group, and service information, following
the Hesiod convention of Project Athena.

Change Log:

Tue, 07 Jul 2026 GMT - DJ Delorie <dj@redhat.com> - 2.39-128
- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)

Fri, 26 Jun 2026 GMT - Patsy Griffin <patsy@redhat.com> - 2.39-127
- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)

Tue, 23 Jun 2026 GMT - Frédéric Bérat <fberat@redhat.com> - 2.39-126
- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)

...

nss_db-2.39-128.el10_2.s390x

Tue, 21 Jul 2026 01:51:13 PM GMT

nss_db - Name Service Switch (NSS) module using hash-indexed files

The nss_db Name Service Switch module uses hash-indexed files in /var/db
to speed up user, group, service, host name, and other NSS-based lookups.

Change Log:

Tue, 07 Jul 2026 GMT - DJ Delorie <dj@redhat.com> - 2.39-128
- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)

Fri, 26 Jun 2026 GMT - Patsy Griffin <patsy@redhat.com> - 2.39-127
- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)

Tue, 23 Jun 2026 GMT - Frédéric Bérat <fberat@redhat.com> - 2.39-126
- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)

...

glibc-static-2.39-128.el10_2.s390x

Tue, 21 Jul 2026 01:51:13 PM GMT

glibc-static - C library static libraries for -static linking.

The glibc-static package contains the C library static libraries
for -static linking. You don't need these, unless you link statically,
which is highly discouraged.

Change Log:

Tue, 07 Jul 2026 GMT - DJ Delorie <dj@redhat.com> - 2.39-128
- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)

Fri, 26 Jun 2026 GMT - Patsy Griffin <patsy@redhat.com> - 2.39-127
- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)

Tue, 23 Jun 2026 GMT - Frédéric Bérat <fberat@redhat.com> - 2.39-126
- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)

...

glibc-nss-devel-2.39-128.el10_2.s390x

Tue, 21 Jul 2026 01:51:13 PM GMT

glibc-nss-devel - Development files for directly linking NSS service modules

The glibc-nss-devel package contains the object files necessary to
compile applications and libraries which directly link against NSS
modules supplied by glibc.

This is a rare and special use case; regular development has to use
the glibc-devel package instead.

Change Log:

Tue, 07 Jul 2026 GMT - DJ Delorie <dj@redhat.com> - 2.39-128
- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)

Fri, 26 Jun 2026 GMT - Patsy Griffin <patsy@redhat.com> - 2.39-127
- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)

Tue, 23 Jun 2026 GMT - Frédéric Bérat <fberat@redhat.com> - 2.39-126
- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)

...

glibc-benchtests-2.39-128.el10_2.s390x

Tue, 21 Jul 2026 01:51:13 PM GMT

glibc-benchtests - Benchmarking binaries and scripts for glibc

This package provides built benchmark binaries and scripts to run
microbenchmark tests on the system.

Change Log:

Tue, 07 Jul 2026 GMT - DJ Delorie <dj@redhat.com> - 2.39-128
- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)

Fri, 26 Jun 2026 GMT - Patsy Griffin <patsy@redhat.com> - 2.39-127
- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)

Tue, 23 Jun 2026 GMT - Frédéric Bérat <fberat@redhat.com> - 2.39-126
- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)

...

dotnet-sdk-10.0-source-built-artifacts-10.0.110-1.el10_2.s390x

Tue, 21 Jul 2026 04:08:09 AM GMT

dotnet-sdk-10.0-source-built-artifacts - Internal package for building .NET 10.0 Software Development Kit

The .NET source-built archive is a collection of packages needed
to build the .NET SDK itself.

These are not meant for general use.

Change Log:

Wed, 08 Jul 2026 GMT - Satish Mane <satmane@redhat.com> - 10.0.110-1
- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463

Thu, 02 Jul 2026 GMT - Tom Deseyn <tdeseyn@redhat.com> - 10.0.109-2
- Reduce time to detect hanging builds
- Resolves: RHEL-191640

Wed, 03 Jun 2026 GMT - Tom Deseyn <tdeseyn@redhat.com> - 10.0.109-1
- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559

...

glib2-static-2.80.4-12.el10_2.14.s390x

Mon, 20 Jul 2026 07:43:39 PM GMT

glib2-static - glib static

The glib2-static subpackage contains static libraries for glib2.

Change Log:

Thu, 09 Jul 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2.80.4-14
- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation

Thu, 23 Apr 2026 GMT - Michael Catanzaro <mcatanzaro@gnome.org> - 2.80.4-13
- Fix CVE-2025-14087 and CVE-2025-14512

Mon, 19 Jan 2026 GMT - Michael Catanzaro <mcatanzaro@gnome.org> - 2.80.4-12
- Add patch for CVE-2025-13601 and patches for GUnixMount issues

...

glib2-doc-2.80.4-12.el10_2.14.s390x

Mon, 20 Jul 2026 07:43:39 PM GMT

glib2-doc - A library of handy utility functions

The glib2-doc package includes documentation for the GLib library.

Change Log:

Thu, 09 Jul 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2.80.4-14
- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation

Thu, 23 Apr 2026 GMT - Michael Catanzaro <mcatanzaro@gnome.org> - 2.80.4-13
- Fix CVE-2025-14087 and CVE-2025-14512

Mon, 19 Jan 2026 GMT - Michael Catanzaro <mcatanzaro@gnome.org> - 2.80.4-12
- Add patch for CVE-2025-13601 and patches for GUnixMount issues

...

dovecot-devel-1:2.3.21-19.el10_2.1.s390x

Mon, 20 Jul 2026 07:11:14 PM GMT

dovecot-devel - Development files for dovecot

This package provides the development files for dovecot.

Change Log:

Fri, 26 Jun 2026 GMT - RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.21-19.1
- fix CVE-2026-42006: fix imap_parser list_count_limit to actually
  work (RHEL-188477)

Mon, 11 May 2026 GMT - Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-19
- update release for rebuild

Thu, 30 Apr 2026 GMT - Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-18
- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)

...

dotnet-sdk-9.0-source-built-artifacts-9.0.119-1.el10_2.s390x

Mon, 20 Jul 2026 05:12:52 PM GMT

dotnet-sdk-9.0-source-built-artifacts - Internal package for building .NET 9.0 Software Development Kit

The .NET source-built archive is a collection of packages needed
to build the .NET SDK itself.

These are not meant for general use.

Change Log:

Wed, 08 Jul 2026 GMT - Satish Mane <satmane@redhat.com> - 9.0.119-1
- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473

Thu, 02 Jul 2026 GMT - Tom Deseyn <tdeseyn@redhat.com> - 9.0.118-2
- Reduce time to detect hanging builds
- Resolves: RHEL-191644

Wed, 03 Jun 2026 GMT - Tom Deseyn <tdeseyn@redhat.com> - 9.0.118-1
- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554

...

libsss_nss_idmap-devel-2.12.0-3.el10_2.1.s390x

Mon, 20 Jul 2026 04:57:02 PM GMT

libsss_nss_idmap-devel - Library for SID and certificate based lookups

Utility library for SID and certificate based lookups

Change Log:

Wed, 08 Jul 2026 GMT - - Tomas Halman <thalman@redhat.com> - 2.12.0-3.1
- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass

Tue, 14 Apr 2026 GMT - Tomas Halman <thalman@redhat.com> - 2.12.0-3
- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified

Thu, 02 Apr 2026 GMT - Tomas Halman <thalman@redhat.com> - 2.12.0-2
- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group

...

dotnet-sdk-8.0-source-built-artifacts-8.0.129-1.el10_2.s390x

Mon, 20 Jul 2026 04:28:26 PM GMT

dotnet-sdk-8.0-source-built-artifacts - Internal package for building .NET 8.0 Software Development Kit

The .NET source-built archive is a collection of packages needed
to build the .NET SDK itself.

These are not meant for general use.

Change Log:

Wed, 08 Jul 2026 GMT - Satish Mane <satmane@redhat.com> - 8.0.129-1
- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468

Thu, 02 Jul 2026 GMT - Tom Deseyn <tdeseyn@redhat.com> - 8.0.128-2
- Reduce time to detect hanging builds
- Resolves: RHEL-191650

Wed, 03 Jun 2026 GMT - Tom Deseyn <tdeseyn@redhat.com> - 8.0.128-1
- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056

...

libtiff-tools-4.6.0-8.el10_2.4.s390x

Mon, 20 Jul 2026 03:26:32 PM GMT

libtiff-tools - Command-line utility programs for manipulating TIFF files

This package contains command-line programs for manipulating TIFF format
image files using the libtiff library.

Change Log:

Mon, 13 Jul 2026 GMT - Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8.4
- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189374)
- make sure documentation is updated during build for CVE-2023-52355 (RHEL-178281)

Mon, 29 Jun 2026 GMT - Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8.3
- reintroduce ignore option -i as it is required for tests (RHEL-185328)

Wed, 03 Jun 2026 GMT - Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8.2
- backport documentation change for CVE-2023-52355 (RHEL-178281)

...

python3.14-freethreading-idle-3.14.5-1.el10_2.1.s390x