<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="36">
<package pkgid="c0be1b2d84254812d0a2d2b3c3bd367781631e7e" name="kernel-iwx" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="f9ae2398462e62228126564dd013d25b3a99aa6a" name="kernel-iwx-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="6d32a5b550db4855abc7c7551ec8eb850b23b342" name="kernel-iwx-headers" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="fe5d342d9faa2e5774d7e13e80cc3fe8869413e7" name="kernel-iwx-tools" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="5405fd9314effefd66ee1b1d67771b516cfd76b8" name="kernel-iwx-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="d3db4da5cedf3162f61de35c8171e75f5ec698ed" name="kernel-iwx-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="3000b69a9a8b511fec50825b0cd195545b7189cf" name="kernel-iwx" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="f6d9b005aaef6757a900c80995fac9bd152a66f1" name="kernel-iwx-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="efa9eb1a1ff561b49f91b7bcdb8efd6a7e0d71f4" name="kernel-iwx-headers" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="27bca8b914a738901f827b1b1698a7e564731993" name="kernel-iwx-tools" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="396acff0b6d332e950813abd675a6d4d5cc9fc37" name="kernel-iwx-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="fa0798edca26261b81f6595c5da33d48c86fbfa8" name="kernel-iwx-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="e3d0baac821d5992bb99d2d43c1302b05590260a" name="kernel-iwx" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="91c7f2cb3cd6b1e9e76f9f9651fc28c4b75e338b" name="kernel-iwx-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="afe1873bf38eedc3863cfe6e6cbd9ef1a5e5eb7a" name="kernel-iwx-headers" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="39a2cc2ed7396c0e1628ed3fea0a56680abe02c5" name="kernel-iwx-tools" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="c6cd8a4fbfca408b3a0de47ad0c3549612414286" name="kernel-iwx-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="51ed764292f0f5c5f098040015da6de71c5d4ade" name="kernel-iwx-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="c0be1b2d84254812d0a2d2b3c3bd367781631e7e" name="kernel-iwx" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="f9ae2398462e62228126564dd013d25b3a99aa6a" name="kernel-iwx-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="6d32a5b550db4855abc7c7551ec8eb850b23b342" name="kernel-iwx-headers" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="fe5d342d9faa2e5774d7e13e80cc3fe8869413e7" name="kernel-iwx-tools" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="5405fd9314effefd66ee1b1d67771b516cfd76b8" name="kernel-iwx-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="d3db4da5cedf3162f61de35c8171e75f5ec698ed" name="kernel-iwx-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el7.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="3000b69a9a8b511fec50825b0cd195545b7189cf" name="kernel-iwx" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="f6d9b005aaef6757a900c80995fac9bd152a66f1" name="kernel-iwx-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="efa9eb1a1ff561b49f91b7bcdb8efd6a7e0d71f4" name="kernel-iwx-headers" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="27bca8b914a738901f827b1b1698a7e564731993" name="kernel-iwx-tools" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="396acff0b6d332e950813abd675a6d4d5cc9fc37" name="kernel-iwx-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="fa0798edca26261b81f6595c5da33d48c86fbfa8" name="kernel-iwx-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el8.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="e3d0baac821d5992bb99d2d43c1302b05590260a" name="kernel-iwx" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="91c7f2cb3cd6b1e9e76f9f9651fc28c4b75e338b" name="kernel-iwx-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="afe1873bf38eedc3863cfe6e6cbd9ef1a5e5eb7a" name="kernel-iwx-headers" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="39a2cc2ed7396c0e1628ed3fea0a56680abe02c5" name="kernel-iwx-tools" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="c6cd8a4fbfca408b3a0de47ad0c3549612414286" name="kernel-iwx-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
<package pkgid="51ed764292f0f5c5f098040015da6de71c5d4ade" name="kernel-iwx-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.18.39" rel="2.el9.iworx"/>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-1.iworx" date="1783684800">- Graft the packaging body (BuildKernel staging, boot scriptlets, -devel
  subpackage) from the ELRepo kernel-ml 6.9.7-1.el7 SRPM; single default
  flavour, x86_64, per-OS %if branches.
- InterWorx additions: EL7 host-tool shims (elf.h via HOSTCFLAGS, copy_file_range
  shim into gen_init_cpio) and the post-olddefconfig config-assertion gate
  (legacy xtables + virtio + ipset + NF_NAT + BBR/fq + XFS quota union).
- EL8/EL9 config assembly and kernel-install boot integration remain TODO.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-7.iworx" date="1784030400">- Catch-up entry for builds 2 through 7: EL7 config rebased onto the broad
  ELRepo distro base (replacing the localmodconfig trim); EL8/EL9 fully enabled
  (Alma 8.10 / Rocky 9 config bases, gcc-toolset-13 on EL8, kernel-install/BLS
  boot integration, secure-boot infra disabled for vanilla source, nft AND
  legacy iptables backends per the APF posture); portable brp macros with EL7
  fallback definitions (rpm 4.11 predates __brp_*); kernel tarball fetched at
  build time via sources/REMOTE-SOURCES instead of manual placement.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-8.iworx" date="1784116800">- Fleet-parity subpackages (parity with the altarch 5.4 fleet kernel):
  headers (make headers_install), tools (cpupower + debug decoders, turbostat,
  x86_energy_perf_policy, tmon, gpio/iio utilities, intel-speed-select),
  tools-libs and tools-libs-devel (libcpupower); name Provides for the
  Fedora-style kernel-core/-modules split on the monolithic main package.
  EL7: turbostat needs a reallocarray shim (toolscompat.h, glibc 2.17);
  kvm_stat is skipped fleet-wide (python3 script, no python3 on EL7).</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-11.iworx" date="1784203200">- Restore the legacy nat and raw table modules (iptable_nat, ip6table_nat,
  iptable_raw, ip6table_raw) plus the MASQUERADE targets, missing from every
  published build: the two-pass olddefconfig flow dropped them because they
  were never on the REQUIRED_M force list and have no legacy-gated Kconfig
  default. Field impact: boot-time ip6tables-restore failed with "unable to
  initialize table 'nat'" on fleet boxes with a *nat block in
  /etc/sysconfig/ip6tables, and iptables-save-based rewrites silently dropped
  *nat from the saved v4 ruleset.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.38-13.iworx" date="1784462400">- Force and assert the fleet's storage and NIC drivers in the config gate so a
  base-config rebase or localmodconfig slip cannot silently drop them:
  SATA_AHCI, MEGARAID_SAS, SCSI_AACRAID, SCSI_MPT3SAS (every RAID/SATA
  controller in the MH+MA hardware scrape, IWX-15066) plus TIGON3, BNXT, IGB,
  IXGBE, I40E, ICE, E1000, E1000E (every fleet NIC family). All are =m in the
  EL7/EL8/EL9 bases; the gate now fails the build if any goes missing.</changelog>
  <changelog author="Tim College &lt;tcollege@interworx.com&gt; - 6.18.39-1.iworx" date="1784548800">- Bump to upstream 6.18.39 (longterm, released 2026-07-18). Notable for us: a
  futex/requeue revert that backs out commit 74e144274af39 (it leaked pi_state
  and broke the waiter==owner self-deadlock case), in the rtmutex/futex-PI path
  that GhostLock (CVE-2026-43499) lives in - 6.18.38 shipped that buggy commit.
  Nothing in .39 touches the asserted RAID/NIC driver set, so the config gate is
  unchanged. Ref IWX-15085.</changelog>
</package>
</otherdata>