Merge pull request #2427 from stackhpc/bump-rocky-repo-versions

Update Rocky Linux repositories and host images for GhostLock (CVE-2026-43499)

Author: priteau

etc/kayobe/pulp-host-image-versions.yml

@@ -1,8 +1,8 @@
 ---
 # Overcloud host image versioning tags
 # These images must be in SMS, since they are used by our AIO CI runners
-stackhpc_rocky_9_overcloud_host_image_version: 2025.1-20260713T135947
-stackhpc_rocky_9_overcloud_host_image_version_aarch64: 2025.1-20260713T135947
-stackhpc_rocky_10_overcloud_host_image_version: 2025.1-20260714T094220
-stackhpc_rocky_10_overcloud_host_image_version_aarch64: 2025.1-20260714T094220
+stackhpc_rocky_9_overcloud_host_image_version: 2025.1-20260715T072311
+stackhpc_rocky_9_overcloud_host_image_version_aarch64: 2025.1-20260715T072311
+stackhpc_rocky_10_overcloud_host_image_version: 2025.1-20260715T072311
+stackhpc_rocky_10_overcloud_host_image_version_aarch64: 2025.1-20260715T072311
 stackhpc_ubuntu_noble_overcloud_host_image_version: 2025.1-20260706T191822

etc/kayobe/pulp-repo-versions.yml

@@ -80,15 +80,15 @@ stackhpc_pulp_repo_rocky_10_1_highavailability_version: 20260506T223941
 stackhpc_pulp_repo_rocky_10_1_security_aarch64_version: 20260510T225242
 stackhpc_pulp_repo_rocky_10_1_security_source_version: 20260510T222658
 stackhpc_pulp_repo_rocky_10_1_security_version: 20260510T223302
-stackhpc_pulp_repo_rocky_10_2_appstream_aarch64_version: 20260713T010231
-stackhpc_pulp_repo_rocky_10_2_appstream_source_version: 20260713T002630
-stackhpc_pulp_repo_rocky_10_2_appstream_version: 20260713T002658
-stackhpc_pulp_repo_rocky_10_2_baseos_aarch64_version: 20260713T230505
-stackhpc_pulp_repo_rocky_10_2_baseos_source_version: 20260713T224945
-stackhpc_pulp_repo_rocky_10_2_baseos_version: 20260713T230445
-stackhpc_pulp_repo_rocky_10_2_crb_aarch64_version: 20260713T010231
+stackhpc_pulp_repo_rocky_10_2_appstream_aarch64_version: 20260714T230725
+stackhpc_pulp_repo_rocky_10_2_appstream_source_version: 20260714T224455
+stackhpc_pulp_repo_rocky_10_2_appstream_version: 20260714T223154
+stackhpc_pulp_repo_rocky_10_2_baseos_aarch64_version: 20260714T230725
+stackhpc_pulp_repo_rocky_10_2_baseos_source_version: 20260714T224455
+stackhpc_pulp_repo_rocky_10_2_baseos_version: 20260714T225549
+stackhpc_pulp_repo_rocky_10_2_crb_aarch64_version: 20260714T230725
 stackhpc_pulp_repo_rocky_10_2_crb_source_version: 20260710T224916
-stackhpc_pulp_repo_rocky_10_2_crb_version: 20260713T223704
+stackhpc_pulp_repo_rocky_10_2_crb_version: 20260714T223154
 stackhpc_pulp_repo_rocky_10_2_extras_aarch64_version: 20260602T012631
 stackhpc_pulp_repo_rocky_10_2_extras_source_version: 20260602T004048
 stackhpc_pulp_repo_rocky_10_2_extras_version: 20260602T001113
@@ -158,13 +158,13 @@ stackhpc_pulp_repo_rocky_9_7_security_source_version: 20260520T222157
 stackhpc_pulp_repo_rocky_9_7_security_version: 20260520T215442
 stackhpc_pulp_repo_rocky_9_8_appstream_aarch64_version: 20260713T115404
 stackhpc_pulp_repo_rocky_9_8_appstream_source_version: 20260712T233423
-stackhpc_pulp_repo_rocky_9_8_appstream_version: 20260713T115404
-stackhpc_pulp_repo_rocky_9_8_baseos_aarch64_version: 20260713T053209
+stackhpc_pulp_repo_rocky_9_8_appstream_version: 20260714T213458
+stackhpc_pulp_repo_rocky_9_8_baseos_aarch64_version: 20260714T221521
 stackhpc_pulp_repo_rocky_9_8_baseos_source_version: 20260713T053209
-stackhpc_pulp_repo_rocky_9_8_baseos_version: 20260713T115404
-stackhpc_pulp_repo_rocky_9_8_crb_aarch64_version: 20260713T130918
+stackhpc_pulp_repo_rocky_9_8_baseos_version: 20260714T220645
+stackhpc_pulp_repo_rocky_9_8_crb_aarch64_version: 20260713T223542
 stackhpc_pulp_repo_rocky_9_8_crb_source_version: 20260710T221031
-stackhpc_pulp_repo_rocky_9_8_crb_version: 20260713T130918
+stackhpc_pulp_repo_rocky_9_8_crb_version: 20260714T213458
 stackhpc_pulp_repo_rocky_9_8_extras_aarch64_version: 20260528T223707
 stackhpc_pulp_repo_rocky_9_8_extras_source_version: 20260528T220844
 stackhpc_pulp_repo_rocky_9_8_extras_version: 20260528T220059
@@ -174,9 +174,9 @@ stackhpc_pulp_repo_rocky_9_8_highavailability_version: 20260709T215352
 stackhpc_pulp_repo_rocky_9_8_security_aarch64_version: 20260605T230645
 stackhpc_pulp_repo_rocky_9_8_security_source_version: 20260605T225017
 stackhpc_pulp_repo_rocky_9_8_security_version: 20260606T214954
-stackhpc_pulp_repo_rocky_9_sig_security_common_aarch64_version: 20260305T225932
-stackhpc_pulp_repo_rocky_9_sig_security_common_source_version: 20260305T224636
-stackhpc_pulp_repo_rocky_9_sig_security_common_version: 20260305T222525
+stackhpc_pulp_repo_rocky_9_sig_security_common_aarch64_version: 20260714T221521
+stackhpc_pulp_repo_rocky_9_sig_security_common_source_version: 20260714T215809
+stackhpc_pulp_repo_rocky_9_sig_security_common_version: 20260714T213458
 stackhpc_pulp_repo_ubuntu_cloud_archive_version: 20260705T230107
 stackhpc_pulp_repo_ubuntu_noble_security_version: 20260706T010259
 stackhpc_pulp_repo_ubuntu_noble_version: 20260706T010259

releasenotes/notes/rl102-repo-bump-ghostlock-0f42f9e67105b676.yaml

@@ -0,0 +1,5 @@
+---
+security:
+  - |
+    The latest Rocky 10.2 kernel (``kernel-6.12.0-211.33.1.el10_2``) is now
+    available, which addresses CVE-2026-43499 ('GhostLock').

releasenotes/notes/rl98-repo-bump-ghostlock-0e46991bdff9ffb1.yaml

@@ -0,0 +1,5 @@
+---
+security:
+  - |
+    The latest Rocky 9.8 kernel (``kernel-5.14.0-687.25.1.el9_8``) is now
+    available, which addresses CVE-2026-43499 ('GhostLock').