Rocky Linux BugTracker - Issues

0012575: postgis package is available in appstream, whereas in RHEL 9 it is only available in the postgresql:16 module

Fri, 24 Apr 2026 14:02:14 +0000

RHEL 9.7 added the postgis package, but it is supported only in the postgresql:16 module stream. It is not available in "appstream". In Rocky Linux 9.7 it is available as a module package as well as in a non-modular version. This forms an incompatibility with upstream. The non-modular package shall be removed.

0012574: category "postgis" missing for Rocky Linux 9

Fri, 24 Apr 2026 13:50:16 +0000

The BugTracker does not have the "postgis" category for Rocky Linux 9 (postgis is a new package since 9.7). It should be added.

0012541: Rocky Linux 9 "extras" repo failing repo GPG signature check

Fri, 24 Apr 2026 09:18:57 +0000

Problem
All Rocky Linux 9.7 servers fail dnf update with:

Error: Failed to download metadata for repo 'extras': repomd.xml GPG signature verification error: Bad GPG signature
Troubleshooting Steps Performed
Verified the local GPG key (0x350D275D) matches the official Rocky Linux 9 release key — fingerprint 21CB 256A E16F C54C 6E65 2949 702D 426D 350D 275D is correct.

Ran dnf clean all, dnf makecache, dnf update — no change.

Re-downloaded and re-imported the GPG key from /etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9 — no change.

Switched the extras repo from mirrorlist to the base URL (dl.rockylinux.org) — no change.

Attempted dnf --disablerepo extras update — other repos updated successfully, confirming the issue is isolated to extras.

Reviewed the known Rocky Linux forum thread (GPG Signature Verification Fails - Rocky Linux 9 BaseOS) — that fix (March 24, 2026) resolved BaseOS/AppStream but not extras.

Definitive test: Downloaded repomd.xml and repomd.xml.asc directly from Rocky’s official repo and verified locally with GPG:

curl -so /tmp/repomd.xml http://dl.rockylinux.org/pub/rocky/9/extras/x86_64/os/repodata/repomd.xml
curl -so /tmp/repomd.xml.asc http://dl.rockylinux.org/pub/rocky/9/extras/x86_64/os/repodata/repomd.xml.asc
gpg --import /etc/pki/rpm-gpg/RPM-GPG-KEY-Rocky-9
gpg --verify /tmp/repomd.xml.asc /tmp/repomd.xml
Result:

gpg: Signature made Tue 21 Apr 2026 05:32:46 AM CDT
gpg: using RSA key 21CB256AE16FC54C6E652949702D426D350D275D
gpg: BAD signature from "Rocky Enterprise Software Foundation - Release key 2022 <releng@rockylinux.org>" [unknown]
Root Cause
Server-side issue at Rocky Linux. The repomd.xml file in the extras repo (dl.rockylinux.org/pub/rocky/9/extras/x86_64/os/repodata/) is out of sync with its detached signature (repomd.xml.asc). The metadata was updated without regenerating the signature, or vice versa. The signing key is correct — the content simply doesn’t match what was signed. This is not a local key or configuration problem.

0012508: mdadm-4.4-4.el9_7 fails to assemble arrays: "Can't open /sys/module/md_mod/parameters/legacy_async_del_gendisk"

Tue, 21 Apr 2026 00:27:27 +0000

Description:

Server was last booted +/- 90 days ago. No problems at that time.
Suspect after the mdadm-4.4-4.el9_7 update (installed 2026-04-11), mdadm --assemble --scan (and automatic boot assembly) fails with:
mdadm: Can't open /sys/module/md_mod/parameters/legacy_async_del_gendisk
mdadm: init md module parameters fail
mdadm: No arrays found in config file or automatically

Affected systems:

Rocky Linux 9.7 (Blue Onyx) per /etc/rocky-release
Kernel: 5.14.0-570.32.1.el9_6.x86_64 (Rocky 9.6 kernel series)
mdadm: 4.4-4.el9_7.x86_64
RAID: RAID10 (near=2, 256K chunks) built on 4× partitions (/dev/sda1–/dev/sdd1)
LVM on top of /dev/md0

0012475: scap-security-guide-0.1.80-1.el9_7.rocky.1.1 RPM missing /usr/share/xml/scap/ssg/content/ssg-rl9-ds.xml File

Sun, 19 Apr 2026 21:04:18 +0000

Description of problem:
The new scap-security-guide RPM no longer contains the /usr/share/xml/scap/ssg/content/ssg-rl9-ds.xml file which breaks the add-on for rocky linux.

SCAP Security Guide Version:
0.1.80-1.el9_7

Operating System Version:
Rocky 9.7

Steps to Reproduce:
1.Download scap-security-guide RPM v80
2. utilize add-on in Rocky kickstart
3. kickstart fails because file doesn't exist
4.

Actual Results:
kickstart fails because the file doesn't exist

Expected Results:
add-on runs like it always has

0012443: tesseract fails to compile when mingw is installed

Tue, 14 Apr 2026 11:56:09 +0000

tesseract package fails to compile, when rpmbuild variable %{mingw_debug_package} is defined,
which is provided by mingw-filesystem-base-148-7.el10.v1.noarch package.

2026-04-14 19:42:41 RPM build errors:
2026-04-14 19:42:41 Could not open %files file /home/kabe/r10builds/tesseract-r10/BUILD/tesseract-5.3.4/mingw32-debugfiles.list: No such file or directory

koji builds seems to not suffer since they do not pull in mingw packages firsthand.

I tried to report this to bugzilla.redhat.com, but the do not have RHEL category. Reporting it here.

0012442: leptonica fails to compile when mingw is installed

Tue, 14 Apr 2026 11:45:52 +0000

leptonica fails to compile when RPM variable %{mingw_debug_package} is defined,
that is, defined in /usr/lib/rpm/macros.d/macros.mingw, which is provided by mingw-filesystem-base-148-7.el10.noarch package.

koji build seems to not suffer since it does not pull in the mingw packages firsthand.

I tried to report this to bugzilla.redhat.com, but it lacks category RHEL, hence reporting here.

0012409: AMD EPYC 9535 Fails to boot Rocky 9.7 due to microcode update failing

Mon, 13 Apr 2026 19:24:17 +0000

System cannot boot Rocky 9.7 due to microcode update failing but worked fine using 9.6. Using dis_ucode_ldr in kernel arguments fixes issue on 9.7. Both an update from 9.6 to 9.7 and a fresh 9.7 install were attempted.

0012376: security_policyvers() returns 33 but only policy.35 exists on disk

Thu, 02 Apr 2026 19:05:05 +0000

## Environment
- Rocky Linux 10.1
- libsepol-3.9-1.el10.x86_64
- sestatus: Max kernel policy version: 33
- Only policy.35 exists under /etc/selinux/targeted/policy/

## Problem
security_policyvers() returns 33, but no policy.33 file exists on disk. The only
installed binary policy file is policy.35. Software that locates the binary policy
by searching downward from security_policyvers() will never find it.

Confirmed: the internal binary version of policy.35 (read at offset 16 in the
policydb) is 35. sestatus still reports "Max kernel policy version: 33".

## Root Cause
Upstream libsepol defines POLICYDB_VERSION_MAX = 33. Rocky Linux 10.1 ships
policy.35, which uses a downstream policy format version (35) not present in
upstream libsepol. security_policyvers() reports the upstream ceiling (33),
creating a mismatch with the actual on-disk file version.

## Suggested Fix
Either:
1. Ship policy.33 as a compatibility symlink to policy.35, or
2. Update libsepol to expose POLICYDB_VERSION_MAX = 35 so that
security_policyvers() reflects the actual on-disk policy version.

## Additional Notes
- Rocky Linux 9.7 is unaffected: policy.33 on disk, internal version 33,
matches security_policyvers().
- Policy versions 34 and 35 do not appear in upstream libsepol source or
changelog — they appear to be downstream extensions.

0012344: AWS AMI support for AMD instances m8a, r8a, c8a

Tue, 31 Mar 2026 03:35:41 +0000

Rocky 9 and 10 AMIs on AWS don't seem to be available on the new AMD instance types m8a, r8a, c8a.
Sorry, not sure how to test this directly, but I guess it should work out of the box if enabled for the AMIs.
Many thanks for looking into this!

0012343: collectd write_riemann always crashing on Rocky 9.7

Mon, 30 Mar 2026 16:33:05 +0000

I'm getting stacktrace from collectd write_riemann plugin, which is using riemann-c-client, when collectd is trying to send metrics. I didn't have these issues before. Stacktrace details:

```
Process 4729 (collectd) of user 0 dumped core.
Stack trace of thread 4732:
#0 0x00007f52f075d5bd __strlen_avx2 (libc.so.6 + 0x15d5bd)
#1 0x00007f52f069c6c3 __strdup (libc.so.6 + 0x9c6c3)
#2 0x00007f52f05f991c riemann_event_set_va (libriemann-client.so.0 + 0x591c)
#3 0x00007f52f05f9e81 riemann_event_set (libriemann-client.so.0 + 0x5e81)
#4 0x00007f52f0813f6c wrr_value_to_event (write_riemann.so + 0x2f6c)
#5 0x00007f52f0814463 wrr_value_list_to_message (write_riemann.so + 0x3463)
#6 0x00007f52f0814bc3 wrr_write (write_riemann.so + 0x3bc3)
#7 0x000055a706ee4b9e plugin_write (collectd + 0x10b9e)
#8 0x000055a706ee6d85 fc_bit_write_invoke.lto_priv.0 (collectd + 0x12d85)
#9 0x000055a706ef23ff plugin_dispatch_values_internal.isra.0 (collectd + 0x1e3ff)
#10 0x000055a706ee01f7 plugin_write_thread (collectd + 0xc1f7)
#11 0x00007f52f068a19a start_thread (libc.so.6 + 0x8a19a)
#12 0x00007f52f070f210 __clone3 (libc.so.6 + 0x10f210)

Stack trace of thread 4738:
#0 0x00007f52f068ef6a __GI___pthread_mutex_unlock_usercnt (libc.so.6 + 0x8ef6a)
#1 0x000055a706ee1264 plugin_write_enqueue (collectd + 0xd264)
#2 0x000055a706ee1817 plugin_dispatch_values (collectd + 0xd817)
#3 0x00007f52f089f66f disk_submit (disk.so + 0x166f)
#4 0x00007f52f08a00a4 disk_read (disk.so + 0x20a4)
#5 0x000055a706ee44bc plugin_read_thread (collectd + 0x104bc)
#6 0x00007f52f068a19a start_thread (libc.so.6 + 0x8a19a)
#7 0x00007f52f070f210 __clone3 (libc.so.6 + 0x10f210)
```
I've reported this to riemann-c-client maintaner (https://git.madhouse-project.org/algernon/riemann-c-client/issues/17) and he suspects it's something either due to collectd or packaging. However, I'm running collectd 5.12.0 and riemann-c-client 1.10.4 on Debian 13 without any issue

Also, rieman-c-client might need update on Rocky as well.

0012180: Trusted Domain Authentication samba 4.22 Rocky 9.7

Tue, 24 Mar 2026 18:17:11 +0000

Samba 4.22.4-12.el9_7 doesn't seem to contain the regression anymore for CVE-2025-49716 netlogon hardening fix

- **OS**: Rocky Linux 9.7 (Blue Onyx)
- **Samba Version**: samba-4.22.4-12.el9_7.x86_64
- **Configuration**: Domain member server joined to DOMAIN-A.COM with forest transitive trust to DOMAIN-B.COM
- **idmap backend**: ad (for DOMAIN-B), sss (for DOMAIN-A)

After upgrading from Rocky Linux 9.6 (samba-4.21.3-14.el9_6) to Rocky Linux 9.7 (samba-4.22.4-12.el9_7), NTLM challenge/response authentication fails for users from the trusted domain DOMAIN-B.COM with `NT_STATUS_WRONG_PASSWORD`. Plaintext authentication works correctly.

[log.wb-DOMAIN-B] cm_connect_netlogon_transport: get_secure_channel_type gave SEC_CHAN_NULL for DOMAIN-B
[log.wb-DOMAIN-B] cli_rpc_pipe_open_noauth: opened pipe netlogon to machine DC01.domain-b.com and bound anonymously
[log.winbindd] lm_resp: DATA_BLOB length=0
[log.winbindd] nt_resp: DATA_BLOB length=0
[log.winbindd] result: NT_STATUS_WRONG_PASSWORD

No `netr_LogonSamLogon` calls found in logs - winbind not attempting netlogon authentication for trusted domain challenge/response.

0012310: kernels > 6.12.0-68.el10: data loss when using md raid1 with with writemostly flag

Mon, 23 Mar 2026 14:53:36 +0000

The current redhat kernels 6.12.0-124.40.1.el10_1 on EL10 and 5.14.0-611.36.1.el9_7 on EL9 contain a regression that leads to data-loss if a raid1 is configured with one disk flagged as writemostly.

The regression was introduced by this linux kernel commit:
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=8a0adf3d778c4a0893c6d34a9e1b0082a6f1c495

It was backported to EL10 and EL9:

EL10:
* Mon Mar 24 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-68.el10]
- md/raid1,raid10: don't ignore IO flags (Nigel Croxon) [RHEL-83951]

EL9:
* Thu Mar 27 2025 Augusto Caringi <acaringi@redhat.com> [5.14.0-576.el9]
- md/raid1,raid10: don't ignore IO flags (Nigel Croxon) [RHEL-83988]

The mainline kernel already contains a fix:

https://github.com/torvalds/linux/commit/743bf030947169c413a711f60cebe73f837e649f

However this fix didn't make it into redhat kernels yet.

0012211: SELinux regression in selinux-policy-42.1.7-1.el10_1.1 causes systemd AVC denial (init_t capability2 mac_admin) and breaks syste

Wed, 11 Mar 2026 13:26:37 +0000

After upgrading to selinux-policy-42.1.7-1.el10_1.1 on Rocky Linux 10.1, SELinux starts denying the mac_admin capability for systemd (init_t). This results in repeated AVC denials and causes system services to malfunction. In our environment this manifests as failures when managing services (for example via systemctl or automation tools such as Ansible).

Downgrading SELinux policy packages to 42.1.7-1.el10 resolves the issue immediately.

Working versions:

selinux-policy-42.1.7-1.el10.noarch
selinux-policy-targeted-42.1.7-1.el10.noarch
systemd-257-13.el10.rocky.0.1.x86_64
dbus-broker-36-4.el10.x86_64

Broken versions:

selinux-policy-42.1.7-1.el10_1.1.noarch
selinux-policy-targeted-42.1.7-1.el10_1.1.noarch

0012277: Legion Y9000P: AW88399 smart amp not working (driver not enabled, firmware missing, NVIDIA HDA conflict)

Wed, 11 Mar 2026 05:26:03 +0000

Hardware
Host: 83F4 (Legion Y9000P IAX10, 2025)
CPU: Intel(R) Core(TM) Ultra 9 275HX (24) @ 5.40 GHz
GPU 1: NVIDIA GeForce RTX 5060 Max-Q / Mobile [Discrete]
GPU 2: Intel Graphics @ 1.90 GHz [Integrated]
OS: Rocky Linux 10.1 (Red Quartz) x86_64
Kernel: Linux 6.12.0-124.38.1.el10_1.x86_64
Audio Driver: snd_hda_intel / snd-hda-codec-realtek
NVIDIA info:
pcp-pmda-nvidia-gpu-6.3.7-5.el10.x86_64
xorg-x11-drv-nvidia-cuda-libs-580.95.05-1.el10.x86_64
nvidia-modprobe-580.95.05-1.el10.x86_64
xorg-x11-drv-nvidia-libs-580.95.05-1.el10.x86_64
xorg-x11-drv-nvidia-kmodsrc-580.95.05-1.el10.x86_64
nvidia-settings-580.95.05-1.el10.x86_64
xorg-x11-drv-nvidia-power-580.95.05-1.el10.x86_64
xorg-x11-drv-nvidia-580.95.05-1.el10.x86_64
nvidia-persistenced-580.95.05-1.el10.x86_64
xorg-x11-drv-nvidia-cuda-580.95.05-1.el10.x86_64
kmod-nvidia-6.12.0-124.el10_1-580.95.05-1.el10.x86_64
akmod-nvidia-580.95.05-1.el10.x86_64
nvidia-gpu-firmware-20260130-19.3.el10_1.noarch

Problem Symptoms
Speaker output is sharp, tinny, distorted - completely unusable for normal audio.
Headphone jack may work normally (needs confirmation).
Kernel log continuously floods with spurious response errors.
Both "Speaker" and "Bass Speaker" controls appear in ALSA, but bass speaker produces distorted sound.
Root cause: AW88399 smart amplifier driver not present + firmware missing

Detail
Audio Components:
Codec: Realtek ALC287 (hardware ID: 0x10ec0287)
Marketing Name: Realtek ALC3306 (OEM rename by Lenovo, identical to ALC287)
Subsystem ID: 0x17aa3906 (Lenovo Y9000P specific)
Smart Amplifier: AWINIC AW88399 (confirmed by hardware design, but not detected in software)
Speaker Configuration: 4-speaker system (2 full-range + 2 woofers/subwoofers)

Reference:
Kernel Bug 216299 (https://bugzilla.kernel.org/show_bug.cgi?id=216299)
A solution for 6.18/6.19 (https://github.com/nadimkobeissi/16iax10h-linux-sound-saga)

0012245: dracut not detecting IMSM Intel Matrix FakeRAID Metadata Properly - RAID Array not assembling - /dev/rl_nv/root does not exist

Tue, 10 Mar 2026 18:34:57 +0000

In the latest version of Rocky Linux 9 (up-to-date with all packages via yum), complex Intel Matrix RAID (IMSM/DDF) setups often fail to assemble during early boot, dropping users into the dracut emergency shell. This happens on a Dell C1100 CS24-TY 1U server using Intel Matrix FakeRAID 10 with two different sized RAID arrays setup via the BIOS.

This is a recent change, as it used to work about 6 months or so ago.

I had to use this udev rule to get my RAID array to assemble and discover the lvm volumes:

ACTION==“add”, SUBSYSTEM==“block”, ENV{ID_FS_TYPE}==“ddf_member|isw_raid_member”, RUN+=“/usr/sbin/mdadm --assemble --scan --config=/etc/mdadm.conf”, RUN+=“/usr/sbin/lvm pvscan”, RUN+=“/usr/sbin/lvm vgchange -ay“

Dracut seemed to be getting stuck on detecting DDF metadata when it should have been using IMSM meta data. Something changed in the way dracut identifies the RAID array and discovers the LVM volumes.

More information on the issue has been provided in the forums here: https://forums.rockylinux.org/t/rocky-linux-9-7-wont-boot-post-kernel-upgrade-lvm-dev-rl-nv-root-does-not-exist-boots-fine-on-older-kernel/20103

[ 201.001156] az dracut-initqueue[680]: Warning: dracut-initqueue: starting timeout scripts
[ 201.531870] az dracut-initqueue[680]: Warning: dracut-initqueue: timeout, still waiting for following initqueue hooks:
[ 201.533263] az dracut-initqueue[680]: Warning: /lib/dracut/hooks/initqueue/finished/devexists-\x2fdev\x2fdisk\x2fby-id\x2fmd-uuid-f1c6208c:90b871a1:d1e22cc3:b7a767f1.sh: "[ -e "/dev/disk/by-id/md-uuid-f1c6208c:90b871a1:d1e22cc3:b7a767f1" ]"
[ 201.534624] az dracut-initqueue[680]: Warning: /lib/dracut/hooks/initqueue/finished/devexists-\x2fdev\x2fdisk\x2fby-id\x2fmd-uuid-f31c4352:b4bff910:3236e82b:1bcd48d5.sh: "[ -e "/dev/disk/by-id/md-uuid-f31c4352:b4bff910:3236e82b:1bcd48d5" ]"
[ 201.535721] az dracut-initqueue[680]: Warning: /lib/dracut/hooks/initqueue/finished/devexists-\x2fdev\x2fmapper\x2frl_nv-root.sh: "if ! grep -q After=remote-fs-pre.target /run/systemd/generator/systemd-cryptsetup@*.service 2>/dev/null; then
[ 201.535721] az dracut-initqueue[680]: [ -e "/dev/mapper/rl_nv-root" ]
[ 201.535721] az dracut-initqueue[680]: fi"
[ 201.539285] az dracut-initqueue[680]: Warning: /lib/dracut/hooks/initqueue/finished/devexists-\x2fdev\x2frl_nv\x2froot.sh: "[ -e "/dev/rl_nv/root" ]"
[ 201.539285] az dracut-initqueue[680]: Warning: /lib/dracut/hooks/initqueue/finished/devexists-\x2fdev\x2frl_nv\x2fswap.sh: "[ -e "/dev/rl_nv/swap" ]"
[ 201.542192] az dracut-initqueue[680]: Warning: dracut-initqueue: starting timeout scripts
[ 201.542192] az dracut-initqueue[680]: Warning: Could not boot.
[ 201.566498] az systemd[1]: Starting Dracut Emergency Shell...
[ 201.584422] az systemd[1]: Received SIGRTMIN+21 from PID 682 (plymouthd).
[ 201.594483] az systemd[1]: Received SIGRTMIN+21 from PID 682 (plymouthd).
Warning: /dev/rl_nv/root does not exist
Warning: /dev/rl_nv/swap does not exist

0012244: postfix have remove hash and btree type support but in some case the default config still use btree type

Tue, 10 Mar 2026 18:15:23 +0000

sudo postconf |grep -E ' (btree|hash):'
address_verify_map = btree:$data_directory/verify_cache
postscreen_cache_map = btree:$data_directory/postscreen_cache

I you enable address_verify_map function or use for some config file btree type you get this error:

[root@s-virt-g10 tmp]# newaliases
postalias: warning: unsupported dictionary type: btree. Is the postfix-btree package installed?
postalias: fatal: unsupported map type: btree

But the package postfix-btree does not exist.

0012112: Raspberry Pi, Rocky Linux 10 image fails to boot on Pi-4 Model B

Wed, 04 Mar 2026 08:33:19 +0000

The image "Rocky-10-SBC-RaspberryPi.latest.aarch64.raw.xz" available as of 21-Feb-2026 as a download from the Rocky Linux website fails to boot on a Raspberry Pi-4 Model B with 8GB RAM when written to a 32GB SD-card.

At boot the Raspberry boot loader display is presented for approx. 500ms, followed by the colourful, rainbow-like, Raspberry splash screen. Nothing else is ever shown on the display and RL fails to boot. The Pi motherboard has two LED's. Red has continuous illumination, the green flashes seven times, pauses momentarily and then repeats the pattern.

The Rocky Linux 10 README for the Raspberry Pi image identifies that it has been tested (and presumably works) with a Pi 4:

"This image is always available at: https://dl.rockylinux.org/pub/rocky/10/images/aarch64/Rocky-10-SBC-RaspberryPi.latest.aarch64.raw.xz
They have been tested on Raspberry Pi 4 and 5.
Rocky Linux 10 WILL NOT WORK on a Raspberry Pi 1 or 2 (1.1 or earlier) as they are 32-bit only, and Rocky Linux only supports arm64 (aarch64).
Rocky Linux 10 WILL NOT WORK on a Raspberry Pi 3 due to lack of MBR on the images."

0012179: Security update for CVE-2025-14104 missing for Rocky 9.7 util-linux package

Tue, 03 Mar 2026 16:23:31 +0000

The security updates for CVE-2025-14104 were provided as following:

- el8: [util-linux-0:2.32.1-48.el8_10] via RHSA-2026:1852 (2026-02-04) <-- This was made available on 2026-02-05
- el9: [util-linux-0:2.37.4-21.el9_7] via RHSA-2026:1913 (2026-02-04) <-- Still missing (not the same as util-linux-0:2.37.4-21.el9)

The https://errata.rockylinux.org/RLSA-2026:1913 does not appear to denote the correct version for this security update. It references util-linux-0:2.37.4-21.el9 (which was released 2025-05-03 and does not contain the security fix in question (refer to additional information for first 10 lines of changelogs).

Can this security update be made available for the Rocky el9.7 release?

0012178: [Account Services] Data hash table of rotation spam in DMESG

Tue, 03 Mar 2026 14:29:43 +0000

Please update this package as sometimes it is nearly impossible find info directly in the dmesg
please refer to
https://github.com/systemd/systemd/commit/afc47ee2af456d12670df862457dcc7f6b864d79

0011287: cannot update to 9.7 from 9.6

Mon, 02 Mar 2026 01:08:26 +0000

I am trying to update from 9.6 to 9.7 and hitting an error which I want to run by you to see if you know it and what the best solution is. I don't understand enough to be able to know where your "try to add" suggestions of --allowerasing, --skip-broken, and/or --nobest is appropriate

0012079: 10.x devel repository mirrors not working

Thu, 26 Feb 2026 06:57:05 +0000

Enabling the "Devel" repository for 10.0 and 10.x fails. It stopped working sometime in the last couple of months or so.

A similar bug was previously reported for 9.x: https://bugs.rockylinux.org/view.php?id=3268

Note that this is in the context of building a custom Docker image within a GitHub Actions workflow, based on rockylinux/rockylinux from Docker Hub.

0012046: Rocky Linux Boot gives text full of squares on the console ( screen ) after the kernel update to Latest ( 4.18.0-553.104.1 )

Sat, 21 Feb 2026 18:26:29 +0000

We updated the kernel version from kernel-4.18.0-553.97.1.el8_10 to kernel-4.18.0-553.104.1.el8_10.

Then, Booting the rocky server gives white squares full on screen for few seconds.

Please let us know , if this issue is known or tracked , if tracked please give more details on it .

Thanks.

0012013: CVE-2025-7425 missing from Rocky8 errata

Mon, 16 Feb 2026 05:05:47 +0000

Was fixed some time ago in Redhat 8: https://access.redhat.com/security/cve/cve-2025-7425 (August 2025)
Rocky 9 has picked up the fix: https://errata.rockylinux.org/RLSA-2025:12447

Current builds show #12 27.72 libxml2 x86_64 2.9.7-21.el8_10.3 baseos 697 k

0011980: On Rocky Linux 9, perl-DBD-MySQL-4.053-1.el9.0.1.x86_64 has a hard runtime dependency on libmysqlclient.so.21

Sat, 07 Feb 2026 20:14:07 +0000

On Rocky Linux 9, perl-DBD-MySQL-4.053-1.el9.0.1.x86_64 has a hard runtime dependency on libmysqlclient.so.21 -
This makes perl-DBD-MySQL incompatible with Percona Server packages - (percona-server-shared) which obsolete mysql-libs.

On RHEL 9, perl-DBD-MySQL is available in a build (4.050-13.el9) which uses mariadb-connector-c and does not require libmysqlclient.so.21, and therefore works correctly with Percona Server.

As a result, percona-xtrabackup-84 cannot be installed on Rocky 9 when Percona Server is present, while the same setup works on RHEL 9.

Please consider rebuilding perl-DBD-MySQL on Rocky 9 against mariadb-connector-c (as in RHEL), or providing a compatible build as this differs from RHEL spec / behavior.