# changelog

author: Solar Designer <solar@openwall.com> - 2.34-83.12.el9.security.0.5
changelog:
  - Rebase on 2.34-83.12
  - Add iconv() ISO-2022-CN-EXT CVE-2024-2961 fix from upstream glibc 2.34 branch


author: Solar Designer <solar@openwall.com> - 2.34-83.12.el9.security.0.6
changelog:
  - Add nscd CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 fixes
    from upstream glibc 2.34 branch


author: Solar Designer <solar@openwall.com> - 2.34-125.1.el9.security.0.11
changelog:
  - Fix assert() buffer overflow CVE-2025-0395 discovered by Qualys:
    https://www.openwall.com/lists/oss-security/2025/01/22/4


author: Solar Designer <solar@openwall.com> 8.7p1-34.3.el9_3.security.0.3
changelog:
  - Comment out GSSAPI* lines in /etc/ssh/ssh*_config.d/50-redhat.conf and patch
    the code to silently ignore GSSAPIKexAlgorithms when unsupported (like it is
    in our new without-Kerberos build)


author: Solar Designer <solar@openwall.com> 8.7p1-43.el9_5.security.0.11
changelog:
  - Fix CVE-2025-26465 and minor bugs found by Qualys and Rocky Linux while
    searching the source code for similar error patterns


