# packages

pkgId: 12a2b7fc0f4dbc82847b0775737c2485d4463720185b2d597cbb0b05e7154500
name: lkrg
arch: src
version: 1.0.0
epoch: 0
release: 1.el9_6.security
summary: Linux Kernel Runtime Guard (LKRG)
url: https://lkrg.org
rpm_license: GPLv2
rpm_vendor: Rocky Enterprise Software Foundation
rpm_group: Unspecified
rpm_buildhost: pb-6d7a2bc8-f2cf-4908-ae5b-f7651efe66a3-srpm
rpm_packager: Rocky Linux Build System (Peridot) <releng@rockylinux.org>
location_href: Packages/l/lkrg-1.0.0-1.el9_6.security.src.rpm
checksum_type: sha256
description:
  LKRG performs runtime integrity checking of the Linux kernel and detection of
  security vulnerability exploits against the kernel.

  As controversial as this concept is, LKRG attempts to post-detect and
  hopefully promptly respond to unauthorized modifications to the running Linux
  kernel (integrity checking) or to credentials such as user IDs of the running
  processes (exploit detection).  For process credentials, LKRG attempts to
  detect the exploit and take action before the kernel would grant access (such
  as open a file) based on the unauthorized credentials.


pkgId: 14bd2a0de101fa52a153d60662b4f5df82e6c25c9497e57cb2df9cba5c317efc
name: glibc
arch: src
version: 2.34
epoch: 0
release: 168.23.el9_6.security.0.14
summary: The GNU libc libraries
url: http://www.gnu.org/software/glibc/
rpm_vendor: Rocky Enterprise Software Foundation
rpm_group: Unspecified
rpm_buildhost: pb-45b65bbf-ba41-4fbb-bc30-08c8da622a6e-srpm
rpm_packager: Rocky Linux Build System (Peridot) <releng@rockylinux.org>
location_href: Packages/g/glibc-2.34-168.23.el9_6.security.0.14.src.rpm
checksum_type: sha256
description:
  The glibc package contains standard libraries which are used by
  multiple programs on the system. In order to save disk space and
  memory, as well as to make upgrading easier, common system code is
  kept in one place and shared between programs. This particular package
  contains the most important sets of shared libraries: the standard C
  library and the standard math library. Without these two libraries, a
  Linux system will not function.

rpm_license:
  LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL


pkgId: 6c67987cdde6a42814c9e84c4fb8bbae86399d40fb3a1d0baed242b9acfa419a
name: microcode_ctl
arch: src
version: 20231114
epoch: 4
release: 1.el9_2.security
summary: CPU microcode updates for Intel x86 processors
url: https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files
rpm_license: CC0 and Redistributable, no modification permitted
rpm_vendor: Rocky Enterprise Software Foundation
rpm_group: Unspecified
rpm_buildhost: pb-b8a037c8-fecc-4e09-ac4f-81ee1caa91b8-srpm
rpm_packager: Rocky Linux Build System (Peridot) <releng@rockylinux.org>
location_href: Packages/m/microcode_ctl-20231114-1.el9_2.security.src.rpm
checksum_type: sha256
description:
  This package provides microcode update files for Intel x86 and x86_64 CPUs.

  The microcode update is volatile and needs to be uploaded on each system
  boot i.e. it isn't stored on a CPU permanently; reboot and it reverts
  back to the old microcode.

  Package name "microcode_ctl" is historical, as the binary with the same name
  is no longer used for microcode upload and, as a result, no longer provided.


pkgId: 6c67a8178c6a1f6d32920bcb11fc1625dcb95e2f9f2d623df6851f0a01cd4177
name: openssh
arch: src
version: 8.7p1
epoch: 0
release: 45.el9_6.security.0.12
summary: An open source implementation of SSH protocol version 2
url: http://www.openssh.com/portable.html
rpm_license: BSD
rpm_vendor: Rocky Enterprise Software Foundation
rpm_group: Unspecified
rpm_buildhost: pb-fb1b451c-8b26-48ea-9a05-d286d2017cba-srpm
rpm_packager: Rocky Linux Build System (Peridot) <releng@rockylinux.org>
location_href: Packages/o/openssh-8.7p1-45.el9_6.security.0.12.src.rpm
checksum_type: sha256
description:
  SSH (Secure SHell) is a program for logging into and executing
  commands on a remote machine. SSH is intended to replace rlogin and
  rsh, and to provide secure encrypted communications between two
  untrusted hosts over an insecure network. X11 connections and
  arbitrary TCP/IP ports can also be forwarded over the secure channel.

  OpenSSH is OpenBSD's version of the last free version of SSH, bringing
  it up to date in terms of security and features.

  This package includes the core files necessary for both the OpenSSH
  client and server. To make this package useful, you should also
  install openssh-clients, openssh-server, or both.


pkgId: b3f40248daa62f733b6bc3406528298886cd9841b468c4e5e179ee14affdbb74
name: hardened_malloc
arch: src
version: 13
epoch: 0
release: 3.el9_6.security
summary: GrapheneOS hardened_malloc
url: https://github.com/GrapheneOS/hardened_malloc
rpm_license: MIT
rpm_vendor: Rocky Enterprise Software Foundation
rpm_group: Unspecified
rpm_buildhost: pb-1cb163dd-a57c-4ab4-ac8e-5d429ebc3bcd-srpm
rpm_packager: Rocky Linux Build System (Peridot) <releng@rockylinux.org>
location_href: Packages/h/hardened_malloc-13-3.el9_6.security.src.rpm
checksum_type: sha256
description:
  This is a security-focused general purpose memory allocator providing the
  malloc API along with various extensions. It provides substantial hardening
  against heap corruption vulnerabilities. The security-focused design also leads
  to much less metadata overhead and memory waste from fragmentation than a more
  traditional allocator design. It aims to provide decent overall performance
  with a focus on long-term performance and memory usage rather than allocator
  micro-benchmarks. It offers scalability via a configurable number of entirely
  independent arenas, with the internal locking within arenas further divided up
  per size class.


pkgId: ead11907b813679043c126d586729a0c0ea328d9d0a0a0c632a26bb5eb9d4278
name: passwdqc
arch: src
version: 2.0.3
epoch: 0
release: 2.2.el9_5.security
summary: A password/passphrase strength checking and policy enforcement toolset
url: https://www.openwall.com/passwdqc/
rpm_license: BSD-3-Clause
rpm_vendor: Rocky Enterprise Software Foundation
rpm_group: Unspecified
rpm_buildhost: pb-b1ed0615-d73d-4b96-896b-2cc2b89e388b-srpm
rpm_packager: Rocky Linux Build System (Peridot) <releng@rockylinux.org>
location_href: Packages/p/passwdqc-2.0.3-2.2.el9_5.security.src.rpm
checksum_type: sha256
description:
  passwdqc is a password/passphrase strength checking and policy
  enforcement toolset, including a PAM module (pam_passwdqc), command-line
  programs (pwqcheck, pwqfilter, and pwqgen), and a library (libpasswdqc).

  pam_passwdqc is normally invoked on password changes by programs such as
  passwd(1).  It is capable of checking password or passphrase strength,
  enforcing a policy, and offering randomly-generated passphrases, with
  all of these features being optional and easily (re-)configurable.

  pwqcheck and pwqgen are standalone password/passphrase strength checking
  and random passphrase generator programs, respectively, which are usable
  from scripts.

  The pwqfilter program searches, creates, or updates binary passphrase
  filter files, which can also be used with pwqcheck and pam_passwdqc.

  libpasswdqc is the underlying library, which may also be used from
  third-party programs.


pkgId: edbfe4f27ca73aba6d5744e96783a8d4159a6a551357aa1390fd7398cb313ede
name: control
arch: src
version: 0.8.0
epoch: 0
release: 9.el9_6.security
summary: A set of scripts to control installed system facilities
rpm_license: GPLv2+
rpm_vendor: Rocky Enterprise Software Foundation
rpm_group: Unspecified
rpm_buildhost: pb-e3cc5fc6-6668-4c00-8d8b-e179a6da0ec0-srpm
rpm_packager: Rocky Linux Build System (Peridot) <releng@rockylinux.org>
location_href: Packages/c/control-0.8.0-9.el9_6.security.src.rpm
checksum_type: sha256
description:
  The scripts included in this package provide a common interface to
  control system facilities provided by a number of other packages.
  This is intended for use primarily by packages which are providing
  a facility that can potentially be dangerous to system security,
  to let you enable, disable, or configure the facility independently
  from package installation.


